Strange issue on one specific website

Hello MattColford,

Is this error only associated with www.axis.com? What modules are activly configured by you.

What is the current Firmware Version of your UTM.

Regards

Jason

So far yeah just that site. I have IPS, Web Filtering, Network Visibility, WAF, ATP, etc enabled. I have disabled all of them and no change.

Hi Matt,

Please do the following:

Go to Webprotection and use the Policy test tool to see in which Categorie www.axis.com falls, Should be: "Software/Hardware". No check in the Policy if you have set this Categorie to "warning" if so this can be the cause of the wrong display. Change it to allow and see how it works. If the Categorie Software/Hardware is not available add it for test purpose.

Regards

Jason

Matt, does doing #1 in Rulz show the problem?

Cheers - Bob

Unfortunately not. I've disabled essentially everything and it still occurs. I am thinking it may be an issue with how the site may be coded, and something is not loading right, but cannot figure out what and why it only affects internally.

Unfortunately not. I've disabled essentially everything and it still occurs. I am thinking it may be an issue with how the site may be coded, and something is not loading right, but cannot figure out what and why it only affects internally.

Hi Matt,

i also thought coding but then again it should be displayed wrong at my site with an UTM as well and it is displayed correctly.

Regards

Jason

After some more digging, seems to be related to something with javascript. When I am on the internal network, the following errors pop up in the F12 console;

Uncaught SyntaxError: Unexpected identifier
axis_cookieconsent.js:45 Uncaught TypeError: Cannot read property 'country_code' of undefined
at axis_cookieconsent.js:45
at axis_cookieconsent.js:51
(anonymous) @ axis_cookieconsent.js:45
(anonymous) @ axis_cookieconsent.js:51
fg.js:195 Initialized content script
en-ca:244 Uncaught TypeError: $(...).flexslider is not a function
at en-ca:244
at dispatch (jquery.min.js?v=1.10.2:2)
at y.handle (jquery.min.js?v=1.10.2:2)
(anonymous) @ en-ca:244
dispatch @ jquery.min.js?v=1.10.2:2
y.handle @ jquery.min.js?v=1.10.2:2
load (async)
add @ jquery.min.js?v=1.10.2:2
e.event.add @ jquery.min.js?v=1.10.2:4
(anonymous) @ jquery.min.js?v=1.10.2:2
each @ jquery.min.js?v=1.10.2:1
each @ jquery.min.js?v=1.10.2:1
on @ jquery.min.js?v=1.10.2:2
ct.fn.(anonymous function) @ jquery.min.js?v=1.10.2:3
ct.fn.load @ jquery.min.js?v=1.10.2:3
(anonymous) @ en-ca:242
(anonymous) @ en-ca:251

If I tether my computer to my phone, these errors do not appear and the page loads as expected. Just not sure what on the firewall is causing this. As mentioned i've had IPS, web filter, ATP, App Control disabled with an Any Out rule and same issue.

Matt, did you look at the logs?

Cheers - Bob

I did, nothing showing up in there.

Can you do F12, Network tab.  Then Control-F5 to force a full refresh (no cache).

Is there anything that is not 200 or 302?

Given the error is something about country, I wonder if there is some GEOIP detection that is failing when you go through the ISP and not when going through your mobile's ISP.

Everything comes back 200. I tried disabling country filtering as well but no difference there.

On the firewall rule, turn off HTTP and HTTPS scanning and set the Web Policy to None.

Now none of the web traffic is going through the Web Proxy.  If it is still occurring then it is not the XG's fault.