When Symantec Endpoint Protection (SEP) Web Traffic Redirection (WTR) is used in an environment with load balanced egress IPs, web sites or components of web sites (i.e. CSS, images, etc.) intermittently fail to load.
Google Chrome returns a 'This site can't be reached' page.
Internet Explorer returns a 'Can't reach this page' response.
Review of a packet capture shows the web browser receives a '407 Proxy Authentication Required' response.
When load balancing the egress IPs for the environment, the load balancers for Web Security Service (WSS) will generate new connections to different data pods. This results in the behavior experienced by the end-users.
The egress IP must be static, and not load balanced.
Subscribing will provide email updates when this Article is updated. Login is required.