We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda NextGen Firewall X

Antivirus file descriptors are increasing when using the HTTP-proxy

  • Type: Knowledgebase
  • Date changed: 5 months ago
Solution #00005250 
 
Scope:
This solution replies to:
- NG Firewall firmware versions 4.2.x, 5.0.x, 5.2.x
- netfence firmware versions 4.2.x

 
Symptoms:

The file descriptors of the antivirus service are constantly increasing as soon as traffic is send over the HTTP-proxy.

Take a look at statistics in "<range>\box\<boxname>\fdesc\fdesc_<servername>_<servicename>" to see the increase of the file descriptors.


 

Solution:

Sessions through the HTTP-proxy are established but can't be closed correctly.

After a certain amount of established session the firewall engine blocks new sessions. No new sessions can be established until the HTTP-proxy and the antivirus service are restarted.

 

Insert the following two parameters at the "Config" > "Box" > "Virtual Servers" > "<Servername>" > "Assigned Services" > "<Servicename>" > "HTTP Proxy Settings" > "Advanced" >

 

  pconn_timeout 10 seconds
  half_closed_clients off

 

 

Link to This Page:

https://campus.barracuda.com/solution/50160000000IKahAAG