This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Strange issue on one specific website

Having an issue with getting to www.axis.com and its associated sub pages. What's occuring is if I go to the site, it loads but there is broken images/content at the top, and buttons do not work correctly. This also occurs on a mobile device. If I disconnect from the internal network and tether to my phone, the page loads as expected and everything works. I have tried disabling web filter, IPS, country blocking, ATP, making exceptions, creating an any/any firewall rule, nothing works. Any ideas or insight as to what could be causing this, or where I could look next?



This thread was automatically locked due to age.
Parents
  • Hello MattColford,

     

    Is this error only associated with www.axis.com? What modules are activly configured by you.

    What is the current Firmware Version of your UTM.

     

    Regards

    Jason

    Regards

    Jason

    Sophos Certified Architect - UTM

  • So far yeah just that site. I have IPS, Web Filtering, Network Visibility, WAF, ATP, etc enabled. I have disabled all of them and no change.

  • Hi Matt,

     

    Please do the following:

    Go to Webprotection and use the Policy test tool to see in which Categorie www.axis.com falls, Should be: "Software/Hardware". No check in the Policy if you have set this Categorie to "warning" if so this can be the cause of the wrong display. Change it to allow and see how it works. If the Categorie Software/Hardware is not available add it for test purpose.

     

    Regards

    Jason

     

     

    Regards

    Jason

    Sophos Certified Architect - UTM

  • Matt, does doing #1 in Rulz show the problem?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Unfortunately not. I've disabled essentially everything and it still occurs. I am thinking it may be an issue with how the site may be coded, and something is not loading right, but cannot figure out what and why it only affects internally.

  • Hi Matt,

     

    i also thought coding but then again it should be displayed wrong at my site with an UTM as well and it is displayed correctly.

     

    Regards

    Jason

    Regards

    Jason

    Sophos Certified Architect - UTM

  • After some more digging, seems to be related to something with javascript. When I am on the internal network, the following errors pop up in the F12 console;

     

    Uncaught SyntaxError: Unexpected identifier
    axis_cookieconsent.js:45 Uncaught TypeError: Cannot read property 'country_code' of undefined
    at axis_cookieconsent.js:45
    at axis_cookieconsent.js:51
    (anonymous) @ axis_cookieconsent.js:45
    (anonymous) @ axis_cookieconsent.js:51
    fg.js:195 Initialized content script
    en-ca:244 Uncaught TypeError: $(...).flexslider is not a function
    at en-ca:244
    at dispatch (jquery.min.js?v=1.10.2:2)
    at y.handle (jquery.min.js?v=1.10.2:2)
    (anonymous) @ en-ca:244
    dispatch @ jquery.min.js?v=1.10.2:2
    y.handle @ jquery.min.js?v=1.10.2:2
    load (async)
    add @ jquery.min.js?v=1.10.2:2
    e.event.add @ jquery.min.js?v=1.10.2:4
    (anonymous) @ jquery.min.js?v=1.10.2:2
    each @ jquery.min.js?v=1.10.2:1
    each @ jquery.min.js?v=1.10.2:1
    on @ jquery.min.js?v=1.10.2:2
    ct.fn.(anonymous function) @ jquery.min.js?v=1.10.2:3
    ct.fn.load @ jquery.min.js?v=1.10.2:3
    (anonymous) @ en-ca:242
    (anonymous) @ en-ca:251

     

     

    If I tether my computer to my phone, these errors do not appear and the page loads as expected. Just not sure what on the firewall is causing this. As mentioned i've had IPS, web filter, ATP, App Control disabled with an Any Out rule and same issue.

  • Matt, did you look at the logs?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • I did, nothing showing up in there.

  • Can you do F12, Network tab.  Then Control-F5 to force a full refresh (no cache).

    Is there anything that is not 200 or 302?

     

     

    Given the error is something about country, I wonder if there is some GEOIP detection that is failing when you go through the ISP and not when going through your mobile's ISP.

  • Everything comes back 200. I tried disabling country filtering as well but no difference there.

  • On the firewall rule, turn off HTTP and HTTPS scanning and set the Web Policy to None.

     

    Now none of the web traffic is going through the Web Proxy.  If it is still occurring then it is not the XG's fault.

Reply Children
No Data