search cancel

"Network Error" and "tcp_error" when going through the Web Security Service

book

Article ID: 170744

calendar_today

Updated On:

Products

Web Security Service - WSS

Issue/Introduction

Users going through the Web Security Service (WSS) get the following error when attempting to access a website: 

"Network Error" and "tcp_error"


This error could be returned when routing through all WSS pods or only one (1) WSS pod.

Also, a report from the WSS Portal could potentially show "Error 503" in the status: 

Network Error
A communication error occurred:
"Operation timed out".
The web server may be down, too busy, or experiencing other problems preventing it from responding to requests.
Tech support information: tcp_error

Resolution

This problem is caused by that specific website blocking the WSS data-center Egress IP's: 

See Web Security Service (WSS) ingress and egress IP addresses


To resolve this, either: 

(1) Bypass that specific website from the WSS service, or 

(2) Request the website admin to allow all Egress IP's from all WSS data-centers

 

Geolocation: It could be that the registered country information of the Egress IP is different from its actual geolocation and the website incorrectly doesn't allow that Egress IP.  In that case, you can check for updated geolocation with the following URLs: 
  • https://www.iplocation.net
  • https://www.maxmind.com/en/geoip-demo