RE: Issue with users in behind ZScaler

["Lockhart, Roland" <R....@aamgroup.com>]

Hi

This is a follow on from the previous email

Our Guacamole logs are recording two public addresses for these users that experience intermittent disconnections.

One address is their Businesses external egress address and the other one the Zscaler network.

Could this be making their connection reliability lower for the Guac sessions?

Thanks
Roland

From: Nick Couchman <vn...@apache.org>
Sent: Tuesday, August 23, 2022 11:14 PM
To: user@guacamole.apache.org
Subject: Re: Issue with users in behind ZScaler

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

On Tue, Aug 23, 2022 at 11:04 AM Lockhart, Roland <R....@aamgroup.com>> wrote:
Hi

We have a couple of users that connect to the internet via an edge appliance called ZScaler from their corporate network

They seem to have intermittent connection problems, a session of say 30 seconds elapses or a few minutes, then sessions are stable for a couple of hours, then back to tripping at 30 seconds.

This is not the same experience that our other users have with the Guacamole service.

Anyone experience this with something similar?

Is there anything we can recommend to their IT or tune in Guacamole to help with this?


I'll only throw out that I use Guacamole over Zscaler on a daily basis, for several hours per day, to manage several hundred servers, and don't usually experience these issues. The only time I do have trouble is when my local ISP or WiFi has issues, but not generally any issues with Zscaler.

-Nick
==================================================================== Attention Email Disclaimer Notice - This message is the property of AAM Pty Ltd. The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you have received this message in error please notify AAM Pty Ltd immediately via email to mailadmin@aamgroup.com This email has been scanned and cleared by Exchange Online Protection, however AAM Pty Ltd does not guarantee this message free of viruses, or interference.

Re: Issue with users in behind ZScaler

[Antoine Besnier <be...@yahoo.fr.INVALID>]

 My two cents on the subject: I have the same issue. I host a Guacamole server at home, and I have a few SSH connections setup. When I connect from my work place, behind ZScaler, the ssh sessions drop, usually between 30 seconds and 1 minute. Connecting from any other network works fine.
It did not use to be so unstable, though. But there must have been an update recently (either on my company's network, or on ZScaler side) that created this issue.

Definitely not an issue on Guacamole's side though.
CheersAntoine

    Le lundi 14 novembre 2022 à 04:09:10 UTC+1, Michael Jumper <mj...@apache.org> a écrit :  
 
 On Sun, Nov 13, 2022, 6:33 PM Lockhart, Roland <R....@aamgroup.com> wrote:


Hi

 

This is a follow on from the previous email

 

Our Guacamole logs are recording two public addresses for these users that experience intermittent disconnections.

 

One address is their Businesses external egress address and the other one the Zscaler network.

 

Could this be making their connection reliability lower for the Guac sessions?


Sure. It's not impossible that their corporate network is interfering. If they have no issue outside that network, that would be pretty conclusive.
- Mike


  

Re: Issue with users in behind ZScaler

[Michael Jumper <mj...@apache.org>]

On Sun, Nov 13, 2022, 6:33 PM Lockhart, Roland <R....@aamgroup.com>
wrote:

> Hi
>
>
>
> This is a follow on from the previous email
>
>
>
> Our Guacamole logs are recording two public addresses for these users that
> experience intermittent disconnections.
>
>
>
> One address is their Businesses external egress address and the other one
> the Zscaler network.
>
>
>
> Could this be making their connection reliability lower for the Guac
> sessions?
>

Sure. It's not impossible that their corporate network is interfering. If
they have no issue outside that network, that would be pretty conclusive.

- Mike