Its wider issue, where all users who were trying to access any sites gets blocked page.
In portal proxy logs, we see 'access denied' for users and we found that group information missing.
Confirmed that AUTH connector is able connect to CloudSWG.
Restarting AUTH connector service fixes this issue however it comes back again.
CloudSWG using Auth connector (BCAA)
CloudSWG is unable to get the group information from AUTH connector.
We found following in AUTH connector debug logs (bcaa-xxxx-xxxxx.log) collected with Symdiag .
[4056:7232] Thread creation failed.; status=8:0x8:Not enough memory resources are available to process this command.
AUTH connector released version 2.5.11006.2803600 would be able to use more than 2 GB of memory when needed [CAC-44] however server running AUTH connector was not up-to the current recommended baseline.
Need to bring server up to current recommended baseline before trying any other troubleshooting steps.