Url is not working from IE (but without proxy can access)

[Ramkumar P]

Hi Team,

We are facing issue in the url https://imagingacademy.canon.com.sg/

URL cannot access from IE(version 11). but we can access through Chrome.

but we can access the url from IE and chrome without proxy.

 

While we analysis PCAP we found that from IE the request sent via HTTP 1.0 but from the Chrome the request set via HTTP 1.1

 

We have checked IE setting aswell, its already enable use HTTP 1.1. proxy connections.

We have checked the below url which is metioned that  "Symantec Web Gateway (SWG) proxy accepts HTTP 1.1 requests from clients but some features of HTTP 1.1 are unavailable and outbound HTTP requests from SWG proxy use HTTP 1.0"  but its updated on Sep 2015.

https://support.symantec.com/en_US/article.TECH174361.html

 

Please advise on this.

 

Thanks,

Ram.

 

[Aboonaim Golandaz]

Dear Ramkumar,

I tried to access https://imagingacademy.canon.com.sg/ in IE version 11.371 and found website is using HTTP/2.

 

While in Chrome i can see it use SPDY and H2 protocol .

attach screnshot for your reference.

 

 

[Ramkumar P]

Hi Aboonaim,

 

Its working without proxy. i am not sure , but in pcap i could see the connect request through http 1.0.

 

Thanks,

Ram.

[Migration User]

Hi Ram,

 

           Can you share a pcap/policy trace and screenshot of the error when accessing via IE 11?

[Ramkumar P]

Hi Aravind,

 

I have shared you the pacp and policy trace via PM. 

 

Thanks,

Ram

[Migration User]

Hi Ram,

 

The pcap or trace is not showing an access issue caused by proxy. The exception that you are getting is coming back from the server side. You may want to confirm the access via a different proxy on the same network with IE11 browser to see whether it is working or not ?

[Ramkumar P]

Hi Aravind,

Thank you for the update.

But user can access the site without proxy from the same IE11.

Thanks,

Ram.

[Migration User]

Hi Ram,

 

               My doubt is one the server side load balancing as we have discussed over the different case 2 weeks back. That is why I asked to try from a different proxy to confirm. Accessing direct also might take a different public ip on exit and give you different results. Anyway, the exception page and pcap shows successful data transfer between proxy and server.

[Ramkumar P]

Hi Aravind,

But in our case we can access this site from chrom browser 67. 

i observed when it connect from IE it requested Http 1.0 but via chrome http 1.1

 

Thanks,

Ram

[Migration User]

Hi Ram,

 

                 Jut tested this access on my lab machine with direct access as well as via proxy was broken when tried with IE. I have shortlisted the issue to be due to the request header of Accept-Encoding but not able to understand why. I have then enabled ssl interception on proxy for this domain and then tried with below policy.

 

<Proxy>
url.domain=imagingacademy.canon.com.sg action.SuppressEncoding(yes)	

define action SuppressEncoding
 delete(request.header.Accept-Encoding)
end action SuppressEncoding

Then cleared cache on browser and performed a Crtl+F5 to do a force refresh. The site started loading via proxy. Issue remains with direct access as I am not able to suppress the header.

 

[Rajitha Prabath]

Up mentioned script worked for me for different URL. Thanks a lot for the support. It was great help for me to solve long time pending issue. Thanks again.