When connecting to RDP via NetScaler Clientless VPN bookmarks, the RDP window terminates with error 'An internal error has occured' and the NetScaler resets the backend connection with reset code 9952. Make sure you are not using an incorrect backplane interface ID number. When trying to add a new node to a cluster, you receive rrror 'Invalid interface name/number'. When the Content Switch receives HTTP invalid/corrupt header next packets from the same source IP the client may be redirected to an incorrect destination. Once the server was mapped to a Load Balanced Virtual Server the document was editable through the local machine.Ĭontent Switching Virtual Server sends traffic to the wrong Load Balancing Virtual Server, resulting in users receiving 404 HTTP responses.Įnable 'Drop Invalid HTTP Headers' on NetScaler.

When editing a document through the local machine you receive error 'Cannot open a file, incorrect syntax or file path'.Ī WireShark trace shows that the client was sending a request to a server not configured on any of the Content Switching policies. Move the affected NICs in to different VLANs or else aggregate the interfaces in to a link aggregated channel. When more than one interface is in the same vLAN, you observe MAC moves and MAC conflicts between the NICs. In the Persistency Table, you can only see one backend server connection mapped to the source client however when running command 'show ns connection table' you can see connections from the source client to multiple backend servers. The default port for the feature is 5061, and you'll likely find ACL's in the firewall for this port and feature setup.Īs far as how to get around it or rid of it? You can see here for a similar type discussion: but you'll need to make sure CUCM and this feature is no longer needed and remove the class mapping and remove the ACLs and replace them with the proper ones for Lync to use 5061 instead.Applicable Product Versions Affected (if known) The Cisco Phone Proxy on the ASA bridges IP telephony between the corporate IP telephony network and the Internet in a secure manner by forcing data from remote phones on an untrusted network to be encryptedīasically it appears that the user is getting held up on the firewall by this feature. Regardless it's for CUCM's phone proxy feature on an ASDM firewall. It appears that someone can't spell phoneproxy correctly when they typed it in setting it up.

Wireshark http host wildcard