Broken Websites with 9.4 and IE11

Web proxy logs during the failed website loads would be helpful.

One other possibility is if any of those services use non-standard ports (eg other that 80 and 443).  By default in explicit mode the browser will send HTTP/HTTPS traffic on any port to the proxy port on the UTM.  In transparent mode, each port just goes on its own.  Try looking at firewall logs to see if there is any traffic on non-standard ports being blocked.  Also google "spotify ports".

I thought about blocked ports but if that was the case when I login to the computer the websites should still be broken.   It is some setting in Windows GPO for IE11 that just goes bonkers with the UTM being in-line.

As for the logs when I login to the UTM I am full/open access so nothing is being block there either.

Does it have something to do with http 1.1 or javascripting or secure/non-secure content. I am almost to the point of rolling out chrome to 5000's computers

Before you roll out new browsers, take a look at logs.  Another good debugging tool would be to wireshark on the client.

Sorry.   I don't understand why one would ever want to migrate to Transparent from Standard.  You might want to ask for the document I maintain, "Configure HTTP Proxy for a Network of Guests - V9.3," available in English und auch auf Deutsch.

Cheers - Bob

Check again Bob, he is going from standard (using proxy.pac) to inline transparent.

I see that, Michael.  It's just that control with the main body of the employees in Standard is more granular.

EDIT 2012-06-17: It's also more secure as one can control traffic using non-standard ports, and that can't be done with Transparent mode.

Cheers - Bob

With Active Directory Inline works really well. Each group of employees has there own profile for allows/blocks etc..

But i also discovered my broken website issue.  Group Policy had an option to treat all Intranet sites as compatibility mode which sends IE7 as the Agent for webpages.  For some reason going to Inline has some sites being detected wrong by IE as needing compatibility mode  but we have fixed it now so the errors are gone.

BTW whoever can do suggestions.  NOT being able to make up exceptions in SUM that include AD groups/users really doesn't make sense. We can do global exceptions for the company across all our UTM's say by URL but to include a group of AD users we have to make them on the UTM itself which is very time consuming when you need to do it across multiple ones.