Confluence server sometimes throws 403 error

[Dmitrijs Kozlovs]

We have setup with Jira server running behind proxy, Active Directory user sync, SSO configured, Confluence environment is visible only in corporate network, all necessary firewall rules established.

Sometimes when users previously authenticated in Confluence via corporate LAN/WiFi and switches to corporate VPN, confluence starts to throw 403 errors on every page user tries to access. This is happening randomly and can not be reproduced with 100% accuracy. Usually, if user sees 403, other users on same VPN or corporate network have no issues at all.

I think it started when we have destroyed previous whitelist config on proxy and created new from scratch. New config contains all prod network IPs we have.

I dont think someone can provide exact solution to this issue but I am looking for advises where to look and from where to start troubleshooting as i can not find where this 403 error is logged.

[JP _AC Bielefeld Leader_ · Accepted solution]

Hi,

403 should be logged by the proxy access logs.

Best

JP

[Dmitrijs Kozlovs]

Thank you for pointing. I was able to dig for blocked (403) IP addresses in proxy access logs and compare against our whitelist. In the end it is not Confluence fault but issues with obtaining organisation IP via VPN which is completely different problem to investigate.