Symantec Network Protection Support will require information in order to troubleshoot SAML authentication issues that can occur with a ProxySG proxy. Having these information in hand at the time the service request is opened can greatly reduce the time required to resolve the issue.
Here is the list of the required information that our Support Engineer will require:
Policy Trace (Please refer to TECH242198for more information on gathering a policy trace)
Packet Capture taken from the ProxySG
Packet Capture taken from the workstation used to reproduce the issue (WireShark is the recommended software to gather a client side packet capture)
Auth Debug (Please refer to TECH242107 information on collecting authentication debug logs)
SAML Trace logs
To capture SAML Trace logs, you will need install 3rd party browser extensions to capture them.
Here are some example SAML Tracer extension that you may use: