1) When you see this HTTP RESPONSE in a packet capture (PCAP), it's likely that proxy is denying the request.
To verify this, get a policy trace, and look for the exact HTTP REQUEST sent by the client, and match it with the policy rules. You will find either a DENY or Denied by Exception result. You can then modify to rule allow this HTTP REQUEST, if appropriate.
2) There is also a possibility that the upstream (proxy/device/firewall/server etc.) is denying it.
To verify this, get a concurrent PCAP (this proxySG and upstream device), so that you can match the exact URI of the request to the response it returns.
For support to help identify this issue, please create a SR and provide the relevant information, example:
a) PCAP (proxy and/or concurrently with upstream device) b) Policy trace c) Sysinfo d) Event Log
Also please provide the following information during the capture of these data:
i) Client machine IP used for this test ii) URL or server IP iii) Error prompted on the browser, and how long it takes to be prompted
Imported Document ID: 000016397
Subscribing will provide email updates when this Article is updated. Login is required.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
Subscribed to the Article.
Unable to subscribe
Thanks for your additional feedback !!!
Enterprise Support Virtual Agent
Rate Me :
Tell us more:
Welcome! My name is Sami, the Enterprise Support Virtual Agent answering technical support questions.