Issue:
Internet Gatekeeper blocks(or slowdown) some specific web sites, although other web site are no problem.
Resolution:
When specific web sites are blocked(or slowdown) through Internet gatekeeper, Internet Gatekeeper needs to be configured as below.
HTTP/1.0 requests relayed by the Internet Gatekeeper may not be processed due to the setting of the destination Web server, etc., such as when there is a problem with connection only when accessing a specific Web site, although it does not occur with other Web site access I will.
In cases where such a version of HTTP is a problem, there is a possibility that improvement can be expected by trying the following procedure.
1.) Set use_http11 = yes for Linux gateway expert option (default: no setting)
By default, the Linux gateway converts to HTTP / 1.0 for HTTP / 1.1 requests and sends it to the server, but there is a possibility that improvement can be expected by using the HTTP / 1.1 transparent function by the following procedure.
In addition, since this feature has been improved from time to time by version upgrade, we recommend you update to the latest version.
Insert a description of use_http 11 = yes in the entry of [http] in <installation directory> /conf/fsigk.ini
use_http 11 = yes
Then, please restart the HTTP proxy process.
# <Installation directory> /rc.fsigk_http restart
2.) Change settings on the Windows browser side.
Exclude the check box for the Internet Options Advanced tab "Use HTTP 1.1" "Use HTTP 1.1 for proxy connection". Please restart the browser after setting.
3.) Set keepalive = yes setting of Linux gateway to no.
After that, to reflect the setting
# <Installation directory> /rc.fsigk_http restart
Please restart the HTTP proxy process.
4.) Add ipv6 = no setting to the Linux gateway.
(It is set not to perform name resolution in IPV 6)
<Installation directory> /conf/fsigk.ini
[http]
ipv6 = no
After that, please restart the HTTP proxy process.
# <Installation directory> /rc.fsigk_http restart
####For connection problems, various factors such as server load, Ethernet MTU value, name resolution failure, etc. can be considered, so strictly specify the cause by collecting packet log etc.
* The normal installation directory is /opt/f-secure/ fsigk.
Article no: 000004621