Web Isolation health check "Unknown" due to "Invalid tcp port" on the proxy.

Products

• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

The ISO.Server health check on the proxy is showing a status of "Unknown" with the message "Unable to run the health check: Invalid tcp port...".

Domain name: isolation-jump.prod.fire.glass      DNS status: success
      Enabled      Unknown      UP
      IP address: 35.201.102.245              Enabled      Unknown      UP
        Unable to run the health check: Invalid tcp port (expecting 1-65535)

The proxy pcap is showing the health check to the domain name running on port 80 and failed to get a response from the server.

Resolution

There are three steps to try in order to resolve the issue.

1. Disable/enable Web Isolation
ProxySG# conf t
ProxySG#(config)isolation
ProxySG#(config isolation)disable
Wait some time
ProxySG#(config isolation)enable

After a few minutes check if the health check works

2. If the Health Check won’t be fixed, please set it accordingly.
ProxySG#(config)isolation
ProxySG#(config isolation)service example.com secure 443
ProxySG#(config)view

Wait for a couple of minutes.
Change it back:
ProxySG#(config isolation)service isolation-jump.prod.fire.glass secure 443

Wait a few minutes and check the status of the health check

3. If that does not help, please reboot the Proxy.