Problem user auth with HTTP and HTTPS

[enzo]

Hi Clavister,
we have problem with the user authentication functions.
What we want is allow users to authenticate with HTTP or HTTPS. We have do some test today and the results are bad.

Scenario:
- Actual condition
Authentication Rule: Agent "HTTP", source interface "Internal Interface", source lan "Internale lan NOT AUTHENTICATE USER", agent option "BANNER HTML".
IP Policy in attached file
where INT_2_7 is the internal interface, autenticati_net is the network of not authenticated user, autenticati_net_auth is the network of authenticated user, Ext_1_6 is the wan, ip_SH_sfp7_Int_G10 is the shared ip where compare the HTML form

This configuration function perfectly with HTTP auth

- 1st Test condition
same as above with the another authentication rule: Agent "HTTPS", source interface "Internal Interface", source lan "Internale lan NOT AUTHENTICATE USER", agent option "BANNER HTML FOR HTTPS". Result of the test: CPU got to 100% for all time, possibile to authenticate with HTTP and HTTPS but all connection are slow.

- 2nd Test condition
disable Authentication rule for HTTP, enable Authentication Rule for HTTPS. Result of the test: possibile to authenticate with HTTPS not with HTTP (obviously)

- 3rd Test condition
Enable Authentication rule for HTTP and HTTPS with same HTML BANNER: Result of the test same as 1st test

- 4th Test condition
Enable Authentication rule for HTTP and HTTPS with different HTML BANNER and in the banner for HTTP inserted the rewrite to https page for login
with the header <meta http-equiv="refresh" content="0;URL=https://FQDN of ip_SH_sfp7_Int_G10">. Result of the test; no possible authenticate with HTTP (obviously), possibile authenticate with HTTPS, but CPU got to 100% for all time

The question is:
what is wrong in our configuration?
Is possible or not possible to have two authentication rule?
Have you suggest?

Thank's so much for your help

Vincenzo Silvestri

[enzo]

More info:

Today we have do another test and we have captured the log in realtime with the ILA, we have two type of error with id 03700510 and 03700511.

Thank's a lot to all

This is the log:

ime;Device Time (UTC);Name;Message ID;Rule;Severity;Category;Event;Action;Source;Destination;Protocol;Summary
13:11:32;11:11:32;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:32;11:11:32;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:33;11:11:33;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:33;11:11:33;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:33;11:11:33;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:33;11:11:33;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:34;11:11:34;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:34;11:11:34;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:34;11:11:34;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:34;11:11:34;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:34;11:11:34;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:35;11:11:34;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:35;11:11:35;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:35;11:11:35;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:35;11:11:35;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:35;11:11:35;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:35;11:11:35;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:36;11:11:36;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:36;11:11:36;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:36;11:11:36;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:36;11:11:36;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:36;11:11:36;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:37;11:11:37;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:37;11:11:37;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:37;11:11:37;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:38;11:11:37;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:38;11:11:38;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:38;11:11:38;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:38;11:11:38;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:38;11:11:38;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:38;11:11:38;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:38;11:11:38;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:39;11:11:38;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:39;11:11:39;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:39;11:11:39;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:39;11:11:39;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:40;11:11:40;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:41;11:11:41;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:41;11:11:41;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:41;11:11:41;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:41;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:41;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:41;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:42;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:42;11:11:42;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:42;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:42;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:42;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:42;11:11:42;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:42;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:42;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:43;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:44;11:11:43;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:44;11:11:44;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:44;11:11:44;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:44;11:11:44;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:44;11:11:44;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:45;11:11:45;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:45;11:11:45;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:45;11:11:45;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:45;11:11:45;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:45;11:11:45;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:45;11:11:45;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:46;11:11:45;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:46;11:11:45;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:46;11:11:46;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:46;11:11:46;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:46;11:11:46;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:47;11:11:46;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:47;11:11:47;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:47;11:11:47;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:47;11:11:47;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:47;11:11:47;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:48;11:11:48;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:48;11:11:48;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:48;11:11:48;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:49;11:11:48;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:49;11:11:48;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:49;11:11:49;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:49;11:11:49;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:49;11:11:49;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:49;11:11:49;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:49;11:11:49;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:50;11:11:50;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:50;11:11:50;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:50;11:11:50;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:51;11:11:50;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:51;11:11:50;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:51;11:11:51;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:51;11:11:51;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:51;11:11:51;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:51;11:11:51;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:51;11:11:51;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:52;11:11:52;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:52;11:11:52;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:52;11:11:52;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:52;11:11:52;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:52;11:11:52;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:53;11:11:53;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:53;11:11:53;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:53;11:11:53;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:53;11:11:53;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:53;11:11:53;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:53;11:11:53;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:54;11:11:54;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:54;11:11:54;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:54;11:11:54;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:54;11:11:54;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:54;11:11:54;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:54;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:55;11:11:55;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:11:56;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:56;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:56;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:56;11:11:55;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:11:58;11:11:56;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:05;11:12:02;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:16;11:12:13;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:16;11:12:14;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:22;11:12:19;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:26;11:12:24;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:38;11:12:36;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:43;11:12:41;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:54;11:12:52;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:56;11:12:53;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:12:56;11:12:54;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:13:01;11:12:59;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:13:02;11:12:59;fw2;03700511;;Error;USERAUTH;sent_sslalert;close;;;;Sent SSL Alert. Closing down SSL connection
13:13:04;11:13:01;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection
13:13:05;11:13:03;fw2;03700510;;Error;USERAUTH;received_sslalert;close;;;;Received SSL Alert. Closing down SSL connection

[fras]

Hello Enzo,

It's difficult to say what actually happens here, other that something happens during the SSL Handshake that causes both the Clavister Netwall and the Client sending an SSL-Alert.

It is possible to have more than one Authentication Rule, so the limitation should not be there.
As i would like to look deeper into this, and to have a more secure way to communicate and send files, i recommend you to create a Support Ticket for this issue.

Best regards,
Fredrik Å

[enzo]

Thank's Fredrik,

next monday we open a support ticket, if you can anticipate what is needed like configuration, debug file or what else

Have a nice day,
Enzo

[fras]

Hello Enzo,

A configuration file and the unfiltered logs is a good start (or else i can copy them from here).

Looking forward to it, and have a nice weekend.

Best Regards,
Fredrik Å