Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Webfilter HTTPS decryption breaks ChatGPT: HTTP parsing error encountered

We're discovering a strange issue with HTTPS decryption and ChatGPT in all browsers we use.

ChatGPT is unusable when we're logged in with the ChatGPT-licensed Microsoft Account. Any chat request generates this or similar errors:

On the of SFOS 20.0.1 Firewall:

Those requests generate the following errors in Webfilter

  • reason="HTTP parsing error encountered."
  • user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
  • status_code="403"

When adding a web exception, it works fine

^([A-Za-z0-9.-]*\.)?chatgpt\.com\/
HTTPS decryption
HTTPS certificate validation

The strange thing is, when the users use ChatGPT without being logged in or use the Microsoft Co-Pilot in edge, it works.

But without the exception, the "HTTP parsing error encountered" is occurring in the webfilter log when they are logged in using their paid Microsoft/ChatGPT account.

Any idea how this problem can be avoided without having the exception?



edited text for logged in users
[bearbeitet von: LHerzog um 1:59 PM (GMT -8) am 6 Nov 2024]
Parents Reply
  • I could not find errors in the lines following

        Line 538039: 2024-11-06T16:23:52.731614Z [26832/0x2e9c000040d7] [snort_stream_tcp.c:13445:StreamBuildConnTcp] New TCP connection from myipaddress:61094 to 172.64.155.209:443 (inzone:1, outzone:2), UST id:16599 rev:11932
        Line 538050: 2024-11-06T16:23:52.750526Z [26832/0x0] [nsg_nse_policy.c:1689:__nsg_event_debug_log_event_connection] Event on connection from myipaddress:61094 to 172.64.155.209:443

    new case: 02001662

Children
No Data