Online Grammar Checker - Issue

Hi all,

We have a pair of SG450 UTM Appliances (Firmware version 9.405-5) running in Hot Standby Mode.

We have several users attempting to access a site (https://www.grammarly.com). This site allows the upload of passages of text to be checked for grammar etc. However, after logging on to the site an error message is shown which states:

"Your network configuration blocks Grammarly services on this computer. To troubleshoot this issue, click here"

Clicking 'here' opens a link to a diagnostic test between the user PC and the site itself.

A screenshot of the result is shown below:

I cannot see anything in the logs to indicate what the issue may be here and was wondering if anyone has encountered something like this.

Many thanks for your time and assistance in this matter.

John P

  • In reply to DouglasFoster:

    Given the number of 407 errors, I conclude the following:

    • The website is downloading some sort of plug-in, which is why it needs websockets.
    • The plug-in is unable to pass NTLM authentication.
    • The proxy keeps asking for credentials, and gets no response, so it never lets the traffic through.

    Try creating an exception object to bypass authentication for these destinations, remove the more permissive exceptions, and try again.

  • In reply to DouglasFoster:

    Thank-you for all your replies.

    I have crated a new Exception Group in the UTM for Grammarly that skips authentication (as well as SSL checks).  It seems that this exception is working when looking in the logs, but Grammarly still doesn't work.  Here's the log:

    2018:10:29-09:05:29 utm httpproxy[16587]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.XX.170" dstip="52.85.58.157" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2816" request="0xbaff0a00" url="denali-static.grammarly.com/" referer="" error="" authtime="0" dnstime="3" cattime="0" avscantime="0" fullreqtime="7731411" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" exceptions="auth,content,url,ssl,certcheck,certdate"
    2018:10:29-09:05:29 utm httpproxy[16587]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.XX.170" dstip="54.161.98.25" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="21326" request="0xa65bcc00" url="f-log-editor.grammarly.io/" referer="" error="" authtime="0" dnstime="10896" cattime="0" avscantime="0" fullreqtime="7074987" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" exceptions="auth,content,url,ssl,certcheck,certdate"
    2018:10:29-09:05:29 utm httpproxy[16587]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.XX.170" dstip="54.88.131.17" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5704" request="0xc81bf800" url="subscription.grammarly.com/" referer="" error="" authtime="0" dnstime="16387" cattime="0" avscantime="0" fullreqtime="6379777" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" exceptions="auth,content,url,ssl,certcheck,certdate"
    2018:10:29-09:05:29 utm httpproxy[16587]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.XX.170" dstip="52.85.58.157" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3071" request="0x96cdec00" url="denali-static.grammarly.com/" referer="" error="" authtime="0" dnstime="13724" cattime="0" avscantime="0" fullreqtime="8037962" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" exceptions="auth,content,url,ssl,certcheck,certdate"
    2018:10:29-09:05:29 utm httpproxy[16587]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.XX.170" dstip="18.205.91.83" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5599" request="0xc4265800" url="https://app.grammarly.com/" referer="" error="" authtime="0" dnstime="10641" cattime="0" avscantime="0" fullreqtime="8038420" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" exceptions="auth,content,url,ssl,certcheck,certdate"
    2018:10:29-09:05:29 utm httpproxy[16587]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.XX.170" dstip="54.210.34.44" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5908" request="0xce252c00" url="https://auth.grammarly.com/" referer="" error="" authtime="0" dnstime="8086" cattime="0" avscantime="0" fullreqtime="6737884" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" exceptions="auth,content,url,ssl,certcheck,certdate"
    2018:10:29-09:05:39 utm httpproxy[16587]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.XX.170" dstip="54.161.98.25" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1939" request="0xa83b0a00" url="f-log-editor.grammarly.io/" referer="" error="" authtime="0" dnstime="4" cattime="0" avscantime="0" fullreqtime="9577448" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" exceptions="auth,content,url,ssl,certcheck,certdate"

     

    Many thanks

  • In reply to isoffice:

    For me, it works 

    I have added new exception WEB->Exception->Add New Exception