This issue is caused by an unstable element in the Radware LinkProof NAT feature.
You can resolve the problem by replacing the Radware appliance or upgrading the OS version.
You can find the source of the problem by performing a packet capture in the ProxySG appliance as shown below:
- You will find many "TCP-Retransmission Get HTTP1.1" requests sent from ProxySG to the OCS when performing a PCAP in the ProxySG, as shown below:
- If you perform a PCAP at the outside of the NAT device (the Radware Linkproof), you will find similar TCP retransmission behavior, as shown below:
- As indicated above, the Radware LinkProof does not perform the NAT for all requests sent by the ProxySG appliance, but only some, and randomly.
As a result of this behavior, you must either replace the Radware LinkProof appliance or upgrade the OS version to resolve this problem.