Problem with URL test and client certifcate authentication

All questions related to installations, configurations and maintenance of Advanced Host Monitor (including additional tools such as RMA for Windows, RMA Manager, Web Servie, RCC).
Post Reply
mp1
Posts: 199
Joined: Tue Mar 07, 2006 3:24 am

Problem with URL test and client certifcate authentication

Post by mp1 »

Hi,

I would like to check our ForeFrontTMG, if the the client certificate authentication against our OWA is working.

When I open the URL via the IE on the machine, where HM is running, I will get successfully the URL. Although via the URL test method I will get only "no answer".

I can see the client certificate in the URL test properties.
On the FroneFrontTMG I can see the URL request from the HM, although the https session will be closed:

A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.

Do you have any idea?
Is there a better way to Debug the URL request within in HM, like the "test" button in the http test method?

HM 9.12c

Thanks in advance

Martin
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

"No answer" means "no answer" so Test button cannot help in this case.
Can you check logs on server side to see why request was rejected?

Regards
Alex
mp1
Posts: 199
Joined: Tue Mar 07, 2006 3:24 am

Post by mp1 »

KS-Soft wrote:"No answer" means "no answer" so Test button cannot help in this case.
Can you check logs on server side to see why request was rejected?
All I will get is this in the ForefrontLog:

A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.

0x80074e20 FWX_E_GRACEFUL_SHUTDOWN

I will look further, Google shoes many results. Although when I do a test with IE, then all is fine.

Regards,

Martin
mp1
Posts: 199
Joined: Tue Mar 07, 2006 3:24 am

Post by mp1 »

Unfortunately I couldn't find a solution until now.
Do you have any idea, where the problem could be?

Where is the difference, when I do the request via browser and via the URL test method?

Regards,

Martin
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Do you have any idea, where the problem could be?
H'm, if server log does not provide any answer, the only option we see - use some network sniffer like wireshark...
Where is the difference, when I do the request via browser and via the URL test method?
Various optional fields can be different. E.g. name of the agent.
BTW you may change agent name using options located on Misc page in HostMonitor Options dialog.

What about server side certificate? Does it have valid expiration date? hostname?

Regards
Alex
Post Reply