When configured to run a large report the browser was timing out when going through the ProxySG. The user would see the error message:
Bypassing the ProxySG would allow the report to be generated and downloaded successfully.
This is typically seen on slow web servers where the time taken to generate the report exceeds the default timeouts on the ProxySG
In this particular case the customer was able to workaround the issue by making two changes:
1) From the CLI we reduced the tcp keepalives from the default value of 7200 to 1200 (hidden command):
#(config)tcp-ip tcp-keepalive-timeout 1200
#(config)tcp-ip tcp-keepalive-idle 1200
2) Then create policy to extend the server receive timeout to 3600:
<Proxy>
url.domain="domainname.com" http.server.recv.timeout(3600)