Ошибка 10060 tmg

hi,

i have gone through the forum posts regarding error code 10060 and i have not found one post that would resolve our issue, please help and advise.

background on our setup

4 TMG 2010 servers used as proxy GW for our internal clients

4 checkpoint FW GW used as the endpoint security appliacne 

we have 4 TMG 2010 servers in our environment, all are able to service http requests; however one of the TMG server is not able to get to a particular website, but that particular page is accessable via the other three TMGs. If i bypass the faulty
TMG server and go direct via the FW it works fine. So i know it is not the checkpoint FW and it is not the website. This all use to work just fine and there were no changes performed on the TMG server.

Notes:

— DNS is working fine as i am able to resolves using nslookup on both the client and on the TMG itself, our DNS on the TMG is pointing to the internal DNS server which has forwarders to the external ISPs DNS.

— added an access rule for all outbound, all protocol, all users to this particuarl website and it still fails with timeout

— get the sames results of timeout 10060 when i use the connectivity test tool from the TMG server itself.

— what is interesting is when i use the faulty TMG server as my proxy on IE browser and type the site url using a google search, then click on the link that google search finds, i hit the site.

any help to resolve this issue would be greatly appreciated, thank you in advance 

Captured logs:

Logged error on TMG 2010 V7.0.9193.540
Failed Connection Attempt
Log type: Web Proxy (Forward)
Status: 10060 A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. 

Rule: Anonymous Access Rule
Source: Internal (10.20.x.x:64740)
Destination: External (whub37.webhostinghub.com 205.134.241.108:80)
Request: GET http://epower.core-mark.com
Filter information: Req ID: 14dcd766; Compression: client=No, server=No, compress rate=0% decompress rate=0%

Protocol: http
User: anonymous

web page error on the client- win7pro 64bit sp1

Explanation: The request timed out before the page could be retrieved.

Try the following:
Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.

Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.

Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.

If you are still not able to view the requested page, try contacting your administrator or Helpdesk.

Technical Information (for support personnel)
Error Code 10060: Connection timeout
Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties.

Date: 9/26/2013 4:47:02 PM [GMT]
Server: SFO-TMG.domain.com
Source: Firewall 

Forefront tmg managed control service won t start solutions experts minecraft server error: connection refused apex hosting solution got the error while trying to obtain a website err how fix it in wordpress outlook send/receive 0x800ccc13 windows 11/10 2010: determine which version is installed technet configuring 2010 as web caching ms pro connect on workgroup domain umss unreachable no could be made because resolve/fix issue not technology news and life general: update troubleshooting: unable access https with http s todd 4 tech: essential business fails create reports getting operation failed 0x800004005 joining google chrome browser reporting 0xc0040432 checking for updates 80072ee2 or what do when attempt econnrefused solved database: crosby blog: isa/tmg cannot configuration load balancing an internal behind two microsoft troubleshooting errors solutions: september using command line ftp client threat publish vmware vsphere adrian costea blog

I have an issue where websites that are hosted on a web server (www.example.com) are not accessible from their own network when accessed via its public IP address, but they are accessible from every other network.

This is the network setup:

I have a TMG 2010 SP1 machine behind a router that’s managed by someone else (that I have no access to), and behind that router is the internet.

The «external network» router has a 1:1 NAT for IP addresses pointing to corresponding private IP addresses on the TMG box. The TMG Edge then has a web proxy rule that forwards the requests (to www.example.com) to a web server on Network B.

When you try to access www.example.com (that is hosted on Network B) via its public IP address, the following happens:

Internet -  HTTP 200 OK
External -  HTTP 200 OK
Network A - HTTP 200 OK
Network B - Error Code 10060: Connection timeout
Network C - HTTP 200 OK

I see the traffic hit the TMG firewall, but then it seems to get lost. It does not forward the packet to the external network (which, if it did, it would send straight back). Wireshark shows the packet coming in on the Network B interface, but it never leaves the TMG.

After requesting http://www.example.com/ The TMG firewall log shows an initial permitted outbound request, followed 60 seconds later by:

• Failed Connection Attempt
• Source Network: Network B
• Destination Network: External
• URL: http://203.206.238.xxx (the public IP address, not the URL I
  actually requested)

Status: 10060 A connection attempt failed because the connected party
did not properly respond after a period of time, or established
connection failed because connected host has failed to respond.

I have no idea where the problem lies. I don’t know if it’s because for some reason it’s proxying the public IP address as the URL (there is proxy rules for the IP address, only for FQDNs), or if it’s something completely else.