search cancel

Web sites fail to load in full or partial when using Web Traffic Redirection

book

Article ID: 175904

calendar_today

Updated On:

Products

Endpoint Protection Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

When Symantec Endpoint Protection (SEP) Web Traffic Redirection (WTR) is used in an environment with load balanced egress IPs, web sites or components of web sites (i.e. CSS, images, etc.) intermittently fail to load. 

Google Chrome returns a 'This site can't be reached' page.

Internet Explorer returns a 'Can't reach this page' response.

Review of a packet capture shows the web browser receives a '407 Proxy Authentication Required' response.

Cause

When load balancing the egress IPs for the environment, the load balancers for Web Security Service (WSS) will generate new connections to different data pods. This results in the behavior experienced by the end-users.

Resolution

The egress IP must be static, and not load balanced.