setting check parameters to HTTPS shows status down

0

I have set up a Virtual Service for balancing a group of IIS servers, the connection status shows as up if I use TCP Connection Only, however when I set the Real Server Check Parameters to HTTPS the connection status goes to down. I know HTTPS check is working as we have 2 other Virtual Services balancing for IIS Servers. After a lot of trial and error the only conclusion I can come to is that the published URL is not the returned URL upon successful connection to the website. We launch https://cito.domainname/cito and we are returned with a URL string that appears to be randomly generated for every connection session.

Is there any way we can account for this on the Kemps? Or are we going to have to go back to the software developer and ask them to change the base login URL so that it returns the same URL as we use for connection?

Kemp software version 7.1-24b

Many thanks

Russell 

5 comments

Avatar
0
Bill DeCastro

Hi Russell,

This all depends on what the server is returning to the LoadMaster. By default, the LoadMaster will accept any status code from 200 - 299, 301, 302, and 401.

By the sound of it, the server should be returning a 301 or 302, but the results would indicate otherwise.

Can you please confirm from a server perspective which status code is returned? If you've confirmed that a 301 or 302 is returned, I'd recommend opening a case using the instructions in the below link.

https://support.kemptechnologies.com/hc/en-us/articles/204331539-Kemp-Support-

Avatar
0
Russell Ealing

Hi Bill

Thank you for the quick reply. Looking at the response in the log files return status code is 302.

Russell

Avatar
0
Russell Ealing

Hi Bill

If it helps here is the details from the IIS log file showing my connection

2019-11-18 12:25:03 10.180.131.228 GET /cito - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 302 0 0 15
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/connect/authorize client_id=citoClient&redirect_uri=https%3A%2F%2Fcito.sthegh.sthelier%2Fcito%2FIndex%2F&response_mode=form_post&response_type=id_token%20code&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DWkSXdH6YwnToqmc_1HYOo33XafGB3SMxBpCUAj2aGZMLf9Jc_tsZoMLx3cNPtW2T7nDegHCLC9c3LMgjZ2E4VFmAPvbUXYBtGvgKZ4Oy8xIbJEYVWSKIrmffIfId3u2Yn5BaEjcl32nGfKG0_cOIFEnoQdANz5FB3HJEXyfKeMuy0hi1XrRhbVbRSl_escUVxNmdKHR1jWRM0dnmT2ITIpeISPM&nonce=637096767037386619.MWYxYzg3MDQtY2UzNi00MmU2LWI3OTAtMGU2Mzc1NDUzZTNjZGFlMDY2ZjAtNTY4Ni00ZTc0LWI4ODEtN2U2OGNlYTc3Yjc0&x-client-SKU=ID_NET451&x-client-ver=5.2.1.0 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 302 0 0 0
2019-11-18 12:25:03 127.0.0.1 POST /citosignon/Connect/token - 443 - 127.0.0.1 - - 200 0 0 0
2019-11-18 12:25:03 127.0.0.1 GET /citoAuthApi/api/SignOnMessage - 443 - 127.0.0.1 - - 200 0 0 0
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/account/login returnUrl=%2Fcitosignon%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3DcitoClient%26redirect_uri%3Dhttps%253A%252F%252Fcito.sthegh.sthelier%252Fcito%252FIndex%252F%26response_mode%3Dform_post%26response_type%3Did_token%2520code%26scope%3Dopenid%2520profile%26state%3DOpenIdConnect.AuthenticationProperties%253DWkSXdH6YwnToqmc_1HYOo33XafGB3SMxBpCUAj2aGZMLf9Jc_tsZoMLx3cNPtW2T7nDegHCLC9c3LMgjZ2E4VFmAPvbUXYBtGvgKZ4Oy8xIbJEYVWSKIrmffIfId3u2Yn5BaEjcl32nGfKG0_cOIFEnoQdANz5FB3HJEXyfKeMuy0hi1XrRhbVbRSl_escUVxNmdKHR1jWRM0dnmT2ITIpeISPM%26nonce%3D637096767037386619.MWYxYzg3MDQtY2UzNi00MmU2LWI3OTAtMGU2Mzc1NDUzZTNjZGFlMDY2ZjAtNTY4Ni00ZTc0LWI4ODEtN2U2OGNlYTc3Yjc0%26x-client-SKU%3DID_NET451%26x-client-ver%3D5.2.1.0 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 200 0 0 15
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/lib/jquery/jquery.js - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 404 0 0 0
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/css/site.css - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 200 0 0 0
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/lib/Images/cito-16X16.png - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 200 0 0 0
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/lib/bootstrap/bootstrap.css - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 200 0 0 15
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/lib/bootstrap/js/bootstrap.js - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 404 0 0 15
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/lib/bootstrap/js/bootstrap.js - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 404 0 0 15
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/lib/fonts/OpenSans-Regular.woff - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 https://cito.sthegh.sthelier/citosignon/lib/bootstrap/bootstrap.css 200 0 0 15
2019-11-18 12:25:03 10.180.131.228 GET /citosignon/favicon.ico - 443 - 10.180.192.47 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/77.0.3865.120+Safari/537.36 - 200 0 0 0

Regards

Russell

  

Avatar
0
Bill DeCastro

Russell,

At this time, I would recommend reaching out to Customer Support in order to receive assistance. If you're unfamiliar with how to do so, this can be done using the below link.

https://support.kemptechnologies.com/hc/en-us/articles/204331539-Kemp-Support-

Avatar
0
Russell Ealing

OK thanks Bill, appreciate you taking the time to answer.

 

Russell