Macintosh can't access external Web sites when on corporate network.

hrtmath
hrtmath used Ask the Experts™
on
One of our users has a personal Macintosh computer that can't access any regular external Web sites when on our corporate network.

In Safari, she gets the message:

Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Other browsers produce a similar result.
 
Ping and DNS resolution work when the computer is connected to the corporate network.

The computer works can access Web sites normally when on a non-corporate network.

All other Macs on the network function corectly. We don't use a proxy server.

Panda antimalware turned off.

Any thoughts?

Tom
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
yo_beeDirector of Information Technology

Commented:
Have you tried to deleting the cookies?
Safari Preferences>Security>Cookies
Distinguished Expert 2018

Commented:
One of our users has a personal Macintosh computer that can't access any regular external Web sites when on our corporate network
Are peoples personal systems allowed on the corporate network? That is my red flag here unless your policy allows for it.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.
What are you using for access control or posturing?
bbaoIT Consultant

Commented:
> Ping and DNS resolution work when the computer is connected to the corporate network.

how were the actual PING and DNS performed? can you past the original test results here?
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

David FavorFractional CTO
Distinguished Expert 2018

Commented:
You might check to see if the machine in question is running VPN also.

Sounds very much like either a VPN or firewall running on the machine, if this is the only machine having the problem.

Another consideration is how this machine assigns it's IP.

The machine must likely be setup to use DHCP for address assignment. If the machine has a static address assigned, this might be the problem.
Hans LiemSSL/TLS Expert

Commented:
It seems to me that you have a policy in place on your internal network that prevent you to access outside your environment. You might have to consult with your team who handle the Firewall settings to check it out,
David FavorFractional CTO
Distinguished Expert 2018

Commented:
As Hans Liem said, this almost surely relates to some internal network policy.

And... this policy will likely only kick in if you try assigning a static IP address which will be incorrect inside this corporate network.

If your machine does acquire it's IP using DHCP, you may have to explicitly clear/expire the IP lease you have.

Normally a reboot does this + if you happen to be running this machine on a battery, sometimes OS software misses the fact that the network has changed + a new DHCP IP is required.

Simple thing might be to do a reboot + see if problem resolves.

Otherwise, likely best to contact Corporate IT for assistance, as they'll likely be able to fix this easily.
Commented:
Turns out it was the Panda antimalware software. It was turned off, but still caused problems until it was uninstalled.

Thanks for your help.

Tom

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial