Bookmark returns "Internal Server Error" message

[CS]

This is for 1 of our clients. They need to access one specific site. It worked in 8.3R7. After we upgraded it to 9.1R3, it stopped working and the site just takes forever to load, or hung, when accessing from Pulse Secure bookmark. 

Now, we upgraded it to 9.1R8. They tested, the error is different. It it "Internal Server Error" now. 

This customer have PSVA in a few other cities that are supported by other teams of engineers. The same bookmark works on those PSVA. I compared the bookmark settings on this PSVA that is having error, to those in other cities. They are exactly the same.

I also checked logs. Logs look good to me, all green.

May I have some advices or help her?

[cbrauckmiller]

Hello and thank you for the post.

There is a known issue in PCS 9.1R4 and below on the VM version where a user would receive the Internal Error message.  This was primarily reported on the Admin UI pages, but it is very possible that the same issue is being seen here.  That issue if corrected in PCS 9.1R5 and later.

I'd recommend upgrading the VM to at least PCS 9.1R8.2 or PCS 9.1R9 as there are also numerous security vulnerabilites addressed in those releases.

Thank you

Craig Brauckmiller

Pulse Secure

[[email protected]]

@CS Error message with the yellow background? 

What do we see in the user access logs (make sure we have logging enabled for web requests -- under settings tab) for the web request?

[CS2]

PS: I am not able to log into my original account, CS, so created this CS2 account.

But this is 9.1R8, there should not be this issue anymore right, if based on what you said.

[CS2]

PS: I am not able to log into my original account, CS, so created this CS2 account

The error:

https://imgur.com/a/o8LS6MZ

Yes we have the log. 

id=firewall time="2020-10-30 15:32:34" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Production/2019_12_03_16_30_03_4.7.1.0/images/sprite-24.png" result=200 sent=73 rcvd=362997 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Production/2019_12_03_16_30_03_4.7.1.0/images/sprite-24.png from IPADDRESS3 result=200 sent=73 received=362997 in 1 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:33" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Production/2019_12_03_16_30_03_4.7.1.0/js/Minified/lib/require_domready.js" result=200 sent=88 rcvd=768 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Production/2019_12_03_16_30_03_4.7.1.0/js/Minified/lib/require_domready.... from IPADDRESS3 result=200 sent=88 received=768 in 1 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Production/2019_12_03_16_30_03_4.7.1.0/js/Minified/core.js" result=200 sent=72 rcvd=5138 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Production/2019_12_03_16_30_03_4.7.1.0/js/Minified/core.js from IPADDRESS3 result=200 sent=72 received=5138 in 1 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Images/Spinners/06.gif" result=200 sent=36 rcvd=20833 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Images/Spinners/06.gif from IPADDRESS3 result=200 sent=36 received=20833 in 1 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/App/Logo" result=200 sent=22 rcvd=15038 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//App/Logo from IPADDRESS3 result=200 sent=22 received=15038 in 1 seconds"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/js/Minified/lib/require_domready.js HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/js/Minified/base.js HTTP/1.1"
Info WEB20174 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Images/Controls/Grid/header.png" result=200 sent=45 rcvd=2817 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Images/Controls/Grid/header.png from IPADDRESS3 result=200 sent=45 received=2817 in 1 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Images/transparent.gif" result=200 sent=36 rcvd=807 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Images/transparent.gif from IPADDRESS3 result=200 sent=36 received=807 in 1 seconds"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/js/Minified/core.js HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Images/Controls/Grid/header.png HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Images/transparent.gif HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /App/Logo HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/images/sprite-24.png HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Images/Spinners/06.gif HTTP/1.1"
Info WEB20174 id=firewall time="2020-10-30 15:32:32" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/base.css" result=200 sent=74 rcvd=691458 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=2 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/base.css from IPADDRESS3 result=200 sent=74 received=691458 in 2 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:31" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Images/Icons/util/24/question.png" result=200 sent=47 rcvd=1208 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Images/Icons/util/24/question.png from IPADDRESS3 result=200 sent=47 received=1208 in 1 seconds"
Info WEB20169 id=firewall time="2020-10-30 15:32:30" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Images/Icons/util/24/question.png HTTP/1.1"
Info WEB20174 id=firewall time="2020-10-30 15:32:30" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Js/lib/require-jquery.js" result=200 sent=38 rcvd=349484 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=2 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Js/lib/require-jquery.js from IPADDRESS3 result=200 sent=38 received=349484 in 2 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:29" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/complianceforms-bootstrap.css" result=200 sent=95 rcvd=90310 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=2 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/complianceforms-boot... from IPADDRESS3 result=200 sent=95 received=90310 in 2 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:29" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/views/employee/dashboard.css" result=200 sent=94 rcvd=42090 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=2 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/views/employee/dashb... from IPADDRESS3 result=200 sent=94 received=42090 in 2 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:29" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/views/shared/master/employee.css" result=200 sent=98 rcvd=6493 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=2 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/views/shared/master/... from IPADDRESS3 result=200 sent=98 received=6493 in 2 seconds"
Info WEB20174 id=firewall time="2020-10-30 15:32:28" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Employee" result=200 sent=22 rcvd=60128 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Employee from IPADDRESS3 result=200 sent=22 received=60128 in 1 seconds"
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Js/lib/require-jquery.js HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/complianceforms-bootstrap.css HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/views/employee/dashboard.css HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/views/shared/master/employee.css HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Production/2019_12_03_16_30_03_4.7.1.0/css/Minified/base.css HTTP/1.1"
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Employee HTTP/1.1"
Info WEB20174 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/Auth/TokenLoginRoutine?Token=t61uC2OVPGPnfdhLhGDsCyhhR%2foydIJKfFN9XCEMoUbStUyFA9X56hFtCvMgM4%2bJxKnRZq94l6qEzlMgCt3qBSnpr9Qz8xN4vBDzWzKbGHh9PFJ3NJCTOp3tkYOFvuPepD6cNzVBmAuM2o87Sp%2bj8hTz4YgjR6IsqiBd8AfZsYF1bbunm0qMd37l5VUEMTbVqxdawF6U51Dv4V%2fdAGI60LP0%2ftMbq6a68kjmHFlqKeQSVvsIfWwZ9DS9YfbEH1rKH1iwb5b52QBMjMNPx%2bhbNoWA6GNEbFjEnU0YHBbKHMA0hQz0zE16qp%2f2GhshUuMivH7FbBbHga%2fs1U%2bQD6EsKw%3d%3d" result=302 sent=409 rcvd=126 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=1 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443//Auth/TokenLoginRoutine?Token=t61uC2OVPGPnfdhLhGDsCyhhR%2foydIJKfFN9XCEMo... from IPADDRESS3 result=302 sent=409 received=126 in 1 seconds"
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET /Auth/TokenLoginRoutine?Token=t61uC2OVPGPnfdhLhGDsCyhhR%2foydIJKfFN9XCEMoUbStUyFA9X56hFtCvMgM4%2bJxKnRZq94l6qEzlMgCt3qBSnpr9Qz8xN4vBDzWzKbGHh9PFJ3NJCTOp3tkYOFvuPepD6cNzVBmAuM2o87Sp%2bj8hTz4YgjR6IsqiBd8AfZsYF1bbunm0qMd37l5VUEMTbVqxdawF6U51Dv4V%2fdAGI60LP0%2ftMbq6a68kjmHFlqKeQSVvsIfWwZ9DS9YfbEH1rKH1iwb5b52QBMjMNPx%2bhbNoWA6GNEbFjEnU0YHBbKHMA0hQz0zE16qp%2f2GhshUuMivH7FbBbHga%2fs1U%2bQD6EsKw%3d%3d HTTP/1.1"
Info WEB20174 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst=IPADDRESS6 dstname=site.address.2 type=vpn op=GET arg="/COENextGenCustomAuthenticationRedirector.aspx" result=302 sent=59 rcvd=2888 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=0 msg="WEB20174: WebRequest completed, GET to http://site.address.2:80//COENextGenCustomAuthenticationRedirector.aspx from IPADDRESS6 result=302 sent=59 received=2888 in 0 seconds"
Info AUT24796 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto= src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="AUT24796: Web SSO: Authentication successful. Credential Used: Username: bbartlett, NTLMHash: XXXXXX, HashLength: 52 Realm: company, Auth Type: (16) NTLM (v2), Cred Type: (0) System Credential, Target: site.address.2, Password: XXXXXX, Workstation: Workstation, Policy Auth: (16) NTLM (v2), Cred Label: Default, Server Realm: company, "
Info WEB20169 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.2, Request: GET /COENextGenCustomAuthenticationRedirector.aspx HTTP/1.1"
Info WEB20174 id=firewall time="2020-10-30 15:32:27" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=https src=IPADDRESS2 dst=IPADDRESS3 dstname=site.address.1 type=vpn op=GET arg="/" result=302 sent=14 rcvd=210 agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" duration=2 msg="WEB20174: WebRequest completed, GET to https://site.address.1:443// from IPADDRESS3 result=302 sent=14 received=210 in 2 seconds"
Info WEB20169 id=firewall time="2020-10-30 15:32:25" pri=6 fw=IPADDRESS vpn=ive ivs=Default Network user=DOMAIN\USER realm="2FA" roles="USERNAME" proto=http src=IPADDRESS2 dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="WEB20169: WebRequest ok : Host: site.address.1, Request: GET / HTTP/1.1"

[[email protected]]

@CS2 @CS  I don't see any result with 5xx code which is typically the server side errors (web application reponse), and all the results are 200 OK (result=200)

There is a possibility that a request might not get rewritten properly when using rewrite feature, please try using passthrough proxy.

https://www-prev.pulsesecure.net/download/techpubs/current/434/pulse-connect-secure/pcs/8.3rx/How_To...