I'm having an issue with a CF app that is occasionally throwing 403 errors. User clears cache, reloads, and the site pulls up. So something in the cookies is causing the error. Any thoughts on where to start looking?
s
Scott Bennett
09/07/2022, 6:54 PM
Do you have any web application firewalls (like fuseguard, or AWS WAF, or something along those lines) that are in place to protect your application from attacks? These can respond with 403 errors if the user is triggering one of the rules.
Scott Bennett
09/07/2022, 6:59 PM
It could also be lots of other things, but I use both fuseguard and AWS WAF on different applications so on those apps, if a user complains of 403 errors that is the first place I look. I get the users IP and check the firewall log for blocked requests on that IP.
Scott Bennett
09/07/2022, 7:02 PM
if you don't have a web aplication firewall, it might be helpful to know what version of CF you are on, what version of what webserver you are using, and if you have made any updates to either of those lately.