Shadowing - works with native client but fails via the web admin console

Shadowing via the native client works but fails when using the web admin console.

"Error:
The connection has timed out
The server at tlha. is taking too long to respond.

What can you do about it?

The site could be temporarily unavailable or too busy. Try again in a few moments.   
If you are unable to load any pages, check your computer’s network connection.
If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the web."

Any ideas .. why shadowing in the web admin console fails and how to fix it?

Hmm. Which machine in your cluster are you accessing the web admin console on? Are you currently using the browser-based client (outside of tlwebadm) as well at the native client?

Accessing the web admin console via the HA VIP and directly on the primary broker - you bring up the session details and attempt to shadow and it always fails. Using the native client works all the time.

Are the agents all accessible from the client machine directly, via the TLS port?

I can login via the web client to all VDAs without issue. I’ve not tested since updating to the v4.21 beta so will check if the issues resolved.