Solved

Site comes up in IE but not chrome

Posted on 2016-08-23
9
42 Views
Last Modified: 2016-08-25
We recently moved to a online web proxy, zscaler to be exact and one particular user who uses chrome will get a page not displayed when going to a site,say reddit for example but it comes up in internet explorer. I'm assuming chrome is having trouble reading the settings from IE. I had another user who had this problem and I deleted their chrome profile and recreated it but it still happens occasional for them but not as often.  Back to the user it does happen a lot Ive been instructed to replace their PC but if this does not solve the issue what sort of things should I look for to troubleshoot this?

OS is Windows 7 64 bit, Proxy.pac is group policy controlled so they cant undo it if they wanted to.
0
Comment
Question by:stlhost
  • 5
  • 4
9 Comments
 
LVL 15

Accepted Solution

by:
WalkaboutTigger earned 500 total points
ID: 41767345
Check to ensure the workstation in question has the zscaler certificates listed under trusted root certificates or Third-party Root Certification Authorities.

This is not exactly a new issue with Chrome not playing nicely with zscaler or Barracuda transparent proxies.
0
 
LVL 15

Expert Comment

by:WalkaboutTigger
ID: 41767357
Another thing to do is to check the proxy settings in Chrome to ensure they're set the way you need them to be configured for your environment.

Replacing the computer with the same model of computer has a low probability of resolving this issue.
0
 
LVL 2

Author Comment

by:stlhost
ID: 41767365
Verified it is there. Is there some documentation or any info regarding this where chrome doesn't work well with zscaler? I use it everyday and have no issues, but I'm the lucky one I suppose. We've had reports of users falling off of zscaler sometimes.. For example if you go to ip.zscaler.com it lets you know you are authenticated through zscaler and some users dont show them as logged in so they end not being protected.
0
 
LVL 15

Expert Comment

by:WalkaboutTigger
ID: 41767406
That sounds as if Group Policy isn't applying correctly.
Have you checked GPResult.exe to ensure GPOs are appropriately applied?
To use this for your environment, I would recommend

GPRESULT /SCOPE USER /Z > SomeFile.txt

or

GPRESULT /SCOPE USER /H SomeFile.HTML /Z
for an HTML output

or

GPRESULT /SCOPE USER /X SomeFile.XML /Z
for an XML output

If you want/need less detail, change the /Z switch to /V for simply verbose or /R for a simple summary.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 2

Author Comment

by:stlhost
ID: 41767431
This is one of the things I looked at from the start. Ive moved people out of groups in AD where that policy is not applied to a OU where it isn't applied and verified IE is still branded so we have ruled out GP being an issue.
0
 
LVL 15

Expert Comment

by:WalkaboutTigger
ID: 41767764
How are your users authenticating to the service? What mechanism is being used?
0
 
LVL 2

Author Comment

by:stlhost
ID: 41768733
Proxy pac inside of internet explorer. When they start to browse the internet it will ask them to login
0
 
LVL 15

Expert Comment

by:WalkaboutTigger
ID: 41769580
How were the PAC files generated?  Hand-crafted for that smooth, refreshing experience? Defaults from ZS directly?  

Is the person with Chrome on a different subnet or do they have some super spiffy configuration on their machine that is different from everyone else?

For the people getting connected without authenticating to the service, are they being prompted for their credentials and they're not getting authenticated?
0
 
LVL 2

Author Comment

by:stlhost
ID: 41770768
1) it is generated by zscaler service

2) No they are on the same network as everyone else. Their configuration is no different than anyone else, no special requirements

3) No, they are not being prompted. They have no idea they are falling off actually until they hit a site that is blocked by our firewall. When we have them visit http://ip.zscaler.com it will show them they are not logged into the system.

Your comment about "This is not exactly a new issue with Chrome not playing nicely with zscaler or Barracuda transparent proxies." Made me do some searching and I found some issues with this in the bug thread section of chrome. After reading a long history of this I was able to convenience management to get users to stop using chrome. As a result of this we are moving off of the proxy pac file and going to the VPN route with zscaler. So I will accept this as the best solution
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Now-a-days, indirectly, postal services have been replaced by email services. Yes, whenever we hear the word "email" a lot of people only think of gmail. Some people still think that email and gmail are one and the same thing :-). Let's see some …
Several part series to implement Internet Explorer 11 Enterprise Mode
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now