CloudFlare prevents some URLs from loading when going through Cloud SWG

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Users are unable to access some sites because CloudFlare throws a block page error and the user is unable to continue. 

Cause

CloudFlare is not whitelisting our Cloud SWG egress IPs and therefore, a block page is displayed.

 

Resolution

Contact CloudFlare to have them whitelist our Cloud SWG egress IP's according to this doc: https://knowledge.broadcom.com/external/article/167174/web-security-service-wss-ingress-and-egr.html

In many cases, CloudFlare cannot do much and must reach out to the OCS site admin to see whether the whitelist can be performed.

It is often possible to workaround the issue by adding impacted domain to the dedicated IP address feature.