Zscaler: Users cannot access documentation link

Question

Zscaler: Users cannot access documentation link

bmorganmich opened this issue 3 years ago · 6 comments

Users on our network cannot access the documentation using https://date-fns.org/docs/Getting-Started. Appears the server cannot process requests after Zscaler adds the XFF header. Our developers need access to the documentation for a project. Would like someone who manages the server(s) to contact me at bmorgan@netjets.com Bradford Morgan/CyberSecurity Services Network Engineer.

Answer 1 · 2021-12-08T16:21:15.000Z

hi @bmorganmich
are you using a VPN? Sometimes our Firebase doc website is being blocked by a VPN and if you can't access it, please use our Github repo for reference as all the docs are available via JSDocs annotations e.g.
Add function
Hope this helps!

Answer 2 · 2021-12-08T16:50:34.000Z

Answer 3 · 2021-12-08T19:19:32.000Z

@bmorganmich try also whitelisting https://firestore.googleapis.com/, the docs page is making GET and POST requests to that domain as well.

Answer 4 · 2021-12-08T19:33:18.000Z

I tested adding both date-fns.org and firestore.googleapis.com to our whitelist; documentation page now comes up. Thank you for providing the additional URL. Bradford E. Morgan Network Engineer Cybersecurity NetJets Inc. 4111 Bridgeway Avenue BWY2-2.2S350 Columbus, OH 43219 T: (614) 239-3939 C: (614) 832-4845 E: ***@***.******@***.***> www.netjets.com<http://www.netjets.com> NetJets Inc. is a Berkshire Hathaway Company From: fturmel ***@***.***> Sent: Wednesday, December 8, 2021 2:20 PM To: date-fns/date-fns.org ***@***.***> Cc: Bradford Morgan ***@***.***>; Mention ***@***.***> Subject: [EXTERNAL] Re: [date-fns/date-fns.org] Zscaler: Users cannot access documentation link (Issue #209) CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. @bmorganmich<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fbmorganmich&data=04%7C01%7Cbmorgan%40netjets.com%7C21babfb4800e421c61f808d9ba7fb04d%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745879870686445%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=MJoQxk4NpJ0AfFtZDknXftP59HN2jxmPPRY6qTDHE0E%3D&reserved=0> try also whitelisting https://firestore.googleapis.com/, the docs page is making GET and POST requests to that domain as well. - You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fdate-fns%2Fdate-fns.org%2Fissues%2F209%23issuecomment-989123280&data=04%7C01%7Cbmorgan%40netjets.com%7C21babfb4800e421c61f808d9ba7fb04d%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745879870696434%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ip76TX%2BIXBt8x0kMzZ4v99pinnwX%2FkyXp7sxx1wF5MQ%3D&reserved=0>, or unsubscribe<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAW2ULQF6GDAAMTU4LEVOYXTUP6VU5ANCNFSM5JUGHFXA&data=04%7C01%7Cbmorgan%40netjets.com%7C21babfb4800e421c61f808d9ba7fb04d%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745879870696434%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=vqPA2U%2FpPxoGRzqF3Iqj3rj6OnVmMVRbZzeD%2FQbEc%2FI%3D&reserved=0>. Triage notifications on the go with GitHub Mobile for iOS<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7Cbmorgan%40netjets.com%7C21babfb4800e421c61f808d9ba7fb04d%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745879870706419%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=glBdRCjlPpWlnuRKe3KD0dABnh8uOr%2FT4YaRmIj6qa8%3D&reserved=0> or Android<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7Cbmorgan%40netjets.com%7C21babfb4800e421c61f808d9ba7fb04d%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745879870706419%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ItSHp%2BFiQbk2DgCubOE20EasZ25EFQlJPFFHhyvhYRk%3D&reserved=0>. **** **** **** **** This message contains information which may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by reply e-mail and delete the message.

Answer 5 · 2021-12-15T16:43:27.000Z

Answer 6 · 2021-12-15T16:43:59.000Z

Github Team, Here is an update from our Vendor Zscaler. Adding the URLs date-fns.org an firestore.googleapis.com to our white list we still cannot access the Documentation page. However, if I add firestore.googleapis.com to our SSL inspection bypass list we can access the page. This presents and issue as per our Security policies all traffic must be inspected. Hoping we can work together to see if you can determine why your server is not responding to requests from the NetJets network. Thank you Bradford E. Morgan Network Engineer Cybersecurity NetJets Inc. 4111 Bridgeway Avenue BWY2-2.2S350 Columbus, OH 43219 T: (614) 239-3939 C: (614) 832-4845 E: ***@***.******@***.***> www.netjets.com<http://www.netjets.com> NetJets Inc. is a Berkshire Hathaway Company From: Bradford Morgan Sent: Wednesday, December 8, 2021 11:50 AM To: date-fns/date-fns.org ***@***.***>; date-fns/date-fns.org ***@***.***> Cc: Mention ***@***.***>; Jeremy Shepherd ***@***.***> Subject: RE: [EXTERNAL] Re: [date-fns/date-fns.org] Zscaler: Users cannot access documentation link (Issue #209) Tan75, I've cc'd the developer who reported the issue. We are not blocking access to the site. I tried adding the URL data-fns.org to our proxy permit lists and still receive the same error. I've attached the error received by the developer Jeremy Shepherd and his team. I would need someone who manages the server to check for any errors associated with the following Zscaler IP ranges and to check for any logs associated with the XFF header added by the Zscaler proxy. 165.225.56.0/22 165.225.60.20 165.225.0.0/23 165.225.0.159 165.225.0.25 165.225.60.0/22 165.225.60.29 Zscaler Support troubleshooting session comments: Call summary: - We replicated the issue and we could access the site https://date-fns.org<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdate-fns.org%2F&data=04%7C01%7Cbmorgan%40netjets.com%7Ce922321d85564cf675b108d9b4f2d5e5%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637739777353616033%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=FxbUFEqnrvdwXlphjYGNwCHg8XKSbCCcLoZFW0Hlink%3D&reserved=0> however, clicking on Documentation (redirects to link https://date-fns.org/docs/Getting-Started<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdate-fns.org%2Fdocs%2FGetting-Started&data=04%7C01%7Cbmorgan%40netjets.com%7Ce922321d85564cf675b108d9b4f2d5e5%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637739777353625992%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FE1GJr2923iiaACjuYypZD8Vz8392sxKDdzJIqWgAXI%3D&reserved=0>) and we couldn't access the redirected page. ***@***.*** - I took the packet capture on the Zscaler node for the site and we could see the successful traffic and didn't see any blocks. ***@***.*** - We discussed and confirmed that the page is getting redirected to any other webserver and we are not getting a response from the redirected server. Thank you Bradford E. Morgan Network Engineer Cybersecurity NetJets Inc. 4111 Bridgeway Avenue BWY2-2.2S350 Columbus, OH 43219 T: (614) 239-3939 C: (614) 832-4845 E: ***@***.******@***.***> www.netjets.com<http://www.netjets.com> NetJets Inc. is a Berkshire Hathaway Company From: Tan75 ***@***.******@***.***>> Sent: Wednesday, December 8, 2021 11:21 AM To: date-fns/date-fns.org ***@***.******@***.***>> Cc: Bradford Morgan ***@***.******@***.***>>; Mention ***@***.******@***.***>> Subject: [EXTERNAL] Re: [date-fns/date-fns.org] Zscaler: Users cannot access documentation link (Issue #209) CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. hi @bmorganmich<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fbmorganmich&data=04%7C01%7Cbmorgan%40netjets.com%7C205b664db73c470d03f008d9ba66c96b%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745772921066501%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Rk%2BiFdfhiiqgUlXS65SHj%2BaOjywIeE6N0cpqiZrr5TA%3D&reserved=0> are you using a VPN? Sometimes our Firebase doc website is being blocked by a VPN and if you can't access it, please use our Github repo for reference as all the docs are available via JSDocs annotations e.g. Add function<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fdate-fns%2Fdate-fns%2Fblob%2Fmaster%2Fsrc%2Fadd%2Findex.ts%23L8&data=04%7C01%7Cbmorgan%40netjets.com%7C205b664db73c470d03f008d9ba66c96b%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745772921076491%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=vmqW2sAHBAQSXdersKwyM4gVZURUPDhIDK%2FEPw%2BpS2A%3D&reserved=0> Hope this helps! - You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fdate-fns%2Fdate-fns.org%2Fissues%2F209%23issuecomment-988963234&data=04%7C01%7Cbmorgan%40netjets.com%7C205b664db73c470d03f008d9ba66c96b%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745772921076491%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=2hf3nmISfit0K1Ed8b7Y9WHH0aBPXV74%2BhRkWHIWwnI%3D&reserved=0>, or unsubscribe<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAW2ULQGFGTOW75CPHIWIKVTUP6AYNANCNFSM5JUGHFXA&data=04%7C01%7Cbmorgan%40netjets.com%7C205b664db73c470d03f008d9ba66c96b%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745772921086485%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2Byom1P8xrCtCrrE6XQNtO%2BoDGqaHT7SzYWza9joHvpc%3D&reserved=0>. Triage notifications on the go with GitHub Mobile for iOS<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7Cbmorgan%40netjets.com%7C205b664db73c470d03f008d9ba66c96b%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745772921096478%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=eJSufUMcl3w2bJUIBC7jhkxI5hdsrMIiHqMfomasuDw%3D&reserved=0> or Android<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7Cbmorgan%40netjets.com%7C205b664db73c470d03f008d9ba66c96b%7Cafd68e8fa6e1499f9638dceea8479772%7C0%7C0%7C637745772921096478%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=tpUFMG0gZJonDBKYG%2Bu0%2BAvT4C045Q6nN6AT%2BgMy1YA%3D&reserved=0>. **** **** **** **** This message contains information which may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by reply e-mail and delete the message.