ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Unauthenticated user is displayed on blocked webpage
Article ID: 170956
Web Security Service - WSS
Auth connector is showing green in the portal and the Auth connector service (Symantec WSS authentication service) is running in the doming controller, unauthenticated users are displayed on blocked pages when clicking on more.
There is no outbound firewall rule to allow the Auth connector server access to the authentication IP address ranges for the connected data center
IPSec tunnel is the access method to the Web Security Service (WSS)
Auth Connector must talk to authentication IP addresses in each data center. Datacenter Authentication IP ranges must be excluded from the IPsec tunnel and allowed in the firewall outbound access rule.
All of the authentication IP address ranges can be found here.