Delay and/or failure to get Web server by IP address


  • Question
    When browsing to some Websites or using HTTP based applications, client may issue requests to reach the server by its IP address.
    Under specific conditions, such requests may result in high delays or even failures getting the Web server.

  • Answer
    The below network capture extract shows internal DNS queries sent by the Finjan appliance to find server 198.161.228.200:


    The Finjan appliance will try to run a reverse DNS query for this IP in order to understand whether or not there is any URL list entry matching this IP.
    This DNS query fails and the transactions time out.

    These reverse DNS queries can be disabled by adding this particular IP to the Hosts list on the Finjan appliance.
     https://FINJAN-IP:3012 -> Advanced Settings -> Network Settings -> Hosts addresses






  • Software Version
    Applicable for version 8.5.0

  • This article applies to:
    NG 1000
    NG 5000
    NG 6000
    NG 8000
    This article was previously published as:
    Finjan KB 1871

    Last Modified 3/30/2009.
    https://support.trustwave.com/kb/KnowledgebaseArticle13597.aspx