A User Cannot Access a Web Proxy Resource Even Though the Resource Is Displayed on the Web UI for an SSL VPN Gateway

A user cannot access a web proxy resource although the resource is displayed on the Web UI for the SSL VPN gateway.

Cause 1: The network between the SSL VPN gateway and an intranet server was faulty.

Cause 2: Web services are not enabled on the intranet server.

Cause 3: Security policies were configured incorrectly.

• Cause 1: The network between the SSL VPN gateway and an intranet server was faulty.
  1. Log in to the Web UI for the FW as the system administrator. In the navigation tree, choose Monitor > Diagnosis Center.
  2. Click the Ping icon. In Host Name or IP Address, enter the intranet server IP address.

  3. Click Ping to check the network connectivity.

     If the IP address cannot be pinged, the network between the SSL VPN gateway and the intranet server is faulty. Verify the connections between the SSL VPN gateway and intranet server and the routing configurations.

• Cause 2: Web services are not enabled on the intranet server.
  1. Log in to the intranet server and choose Start > Run. The Run dialog box is displayed.
  2. Enter cmd and click OK.

  3. In the displayed command-line interface (CLI), run the netstat -anp tcp command to check whether the web service port is in the listening state.

     • If yes, the web service port is enabled. Then go to the next step.

     • If no, the web service port is not enabled. Then enable it.

• Cause 3: Security policies were configured incorrectly.
  1. Log in to the Web UI for the FW as the system administrator. In the navigation tree, choose Policy > Security Policy > Security Policy.
  2. In the displayed page, check the security policy configuration. If there is a security policy that disables the user from using the web proxy resource, change this security policy.