Error: The requested URL was rejected when accessing Aria operations suite-api via Load Balancer

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Integration of third-party products, such as ServiceNow, with the VMware Aria Operations Suite API fails. The connection returns a 403 Forbidden or a generic rejection page.

• Accessing https://<Load-Balancer-FQDN>/suite-api/ returns the error: The requested URL was rejected. Please consult with your administrator.
• ServiceNow logs show: failed to run 3PC java.lang.ClassCastException: class org.mozilla.javascript.Undefined cannot be cast to class org.mozilla.javascript.NativeObject
• API calls from external integrations fail with HTTP errors or connection timeouts.
• The Aria Operations UI at https://<Load-Balancer-FQDN>/ui/ remains fully accessible and functional.

Environment

VMware Aria Operations 8.18.x

Cause

The Load Balancer or an intermediate security device (WAF/Security Gateway) is not configured to permit traffic to the /suite-api path. While the UI path is typically allowed by default, the API path requires explicit permission.

Resolution

To restore access, ensure the network infrastructure permits the specific URL path.

1. Update the Load Balancer or WAF configuration to allow traffic for the path: /suite-api/.
2. Verify that the necessary HTTP methods (GET, POST, PUT, DELETE) are permitted for this path.
3. As a workaround, configure the integration to use the individual node FQDNs or IPs, bypassing the Load Balancer.
4. Validate the resolution by navigating to https://<Load-Balancer-FQDN>/suite-api/ in a browser. The request must return a login prompt or XML/JSON data instead of a rejection page.

Additional Information

For detailed configuration requirements, refer to the VMware Aria Operations Load Balancing Guide.