> Source: [sk107313](https://support.checkpoint.com/results/sk/sk107313)

# sk107313 - Clients behind a Virtual System configured as Non Transparent HTTP/HTTPS Proxy are not able to connect to any site

| Property | Value |
|----------|-------|
| Solution ID | sk107313 |
| Date Created | 2015-09-01 |
| Last Modified | 2016-01-04 |
| Technical Level | Advanced |
| Products | Security Gateway, Hardware |
| Versions | R82.10, R82, R81.20, Not Version-Specific |
| OS | Gaia |

## Symptoms

- * Clients behind a Virtual System configured as Non Transparent HTTP/HTTPS Proxy are not able to connect to any site.

* Traffic capture in FW Monitor ([sk30583](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30583)) shows that traffic from Clients passes all Inbound chains.

* Kernel debug ('`fw ctl debug -m fw + drop`') does not show any drops related to these Clients and HTTP/HTTPS Proxy.

* Disabling the HTTP/HTTPS Proxy on the involved Virtual System and installing the policy resolves the issue.

* <br />

  Kernel debug ('`fw ctl debug -m WS all`') shows that Virtual System sends a trap to User Space, which is not processes, and that eventually DNS resolving fails:
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];fw_send_kmsg: No buffer for tsid 11;`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];...:{connection} [SID: ...] ws_connection_dns_send_rad_trap: [ERROR]: fw_send_kmsg() failed;`  
  `
  ... ... ...`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];...:{connection} [SID: ...] ws_async_create_proxy_connection: [ERROR]: rad_kernel_api_async_get_resource failed;`  
  `
  ... ... ...`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];...:{connection} [SID: ...] ws_dns_proxy_resolve: [ERROR]: ws_async_create_proxy_connection failed;`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];...:{connection} [SID: ...] ws_create_proxy_connection: [ERROR]: ws_dns_proxy_resolve failed;`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];...:{connection} [SID: ...] ws_create_proxy_connection: ERROR ;`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];...:{connection} [SID: ...] ws_open_proxy_connection: [ERROR]: ws_create_proxy_connection failed;`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N* `_0];...:{session} [SID: ...] ws_http_session_client_read: [ERROR]: failed to open session;`  
  `
  ; `*Date Time* `;[vs_`*X* `];[tid_0];[fw`*N*`_0];...:{connection} [SID: ...] ws_connection_read_handler: [WARNING]: read request from session failed sn: 0x...;
  `

## Cause

Virtual System fails to resolve URLs because no *wsdnsd* process (DNS Resolver for HTTP/HTTPS Proxy in R77.30 and above) is not reachable from the context of Virtual System.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content