This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG 17.5, gotomeeting, and chrome...having lots of issues.

I have an issue where having the SSL inspection option turned on for malware filtering is causing app.gotomeeting.com URLs to fail to load. I turn off SSL inspection, the meeting loads. I HAVE added exceptions for gotmeeting.com, citrix.com, etc, but it does not make a difference. I look at the logs and there is no blocked traffic from that computer. I have tried multiple different options in the malware settings, Avira vs Sophos, allowing traffic to pass on malware scan failure, Real-time vs batch, etc...nothing makes a difference. 

Now, what I have noticed is that when launching a link through chrome, it is redirected to app.gotomeeting.com which is a web application. When opening the link in edge, it defaults to global.gotomeeting.com which does work fine. It's like the chrome web app is seeing that we are performing inspection and flips out even though the sophos is supposed to NOT inspect traffic for exceptions. Has anyone else seen this or can replicate it? Is there anyway to make an exception that actually works?



This thread was automatically locked due to age.
Parents
  • Hi Paul,

    Can you show us a screenshot of the exceptions you have created?

    Remote access applications like gotomeeting/logmein/bomgar/citrix/teamviewer etc.. do not work if the certificate chain is broken. These do require the exception but SHOULD work unless there is something in app filtering/IPS blocking the traffic as well. 

  • Here are the exceptions that I have for this issue. Turning off app filtering or IPS do not make a difference. Switching off HTTPS inspection for the firewall rule that effects this subnet is the only way that it will work in chrome. It works in Edge with HTTPS inspection still on. 

  • The format of your exceptions is correct but you are a missing a domain. 

    gotomeeting needs the following domains bypassed to work:

    • gotomeeting.com
    • joingotomeeting.com
    • citrixonline.com

    Add citrixonline.com and wait a minute or two and restart your app to test. 

  • I added the exception and the issue still occurs. I took a screen capture of what it is doing. It looks like it is trying to initialize, but cannot.

    Link: screencast-o-matic.com/.../cqnoD6395g

    0714.GoToMeeting Launch Failure.mp4

  • In chrome, you can press f12 and go into developer tools and go to the console section. 

    Afterwards refresh the page and see what starts giving you errors and paste it here. 

  • I hope this is what you are looking for! I don't see a way to export a nicely formatted set. 

     

    sessionEntry.js:1 2019-02-18T16:41:08.631Z [log] {devices: Array(0)}
    sessionEntry.js:1 {msg: "rtcgw-js ver.: 14.0.5"}
    sessionEntry.js:1 Reconfiguring logger {localLogRecordSize: 10000}localLogRecordSize: 10000__proto__: Objectconstructor: ƒ Object()hasOwnProperty: ƒ hasOwnProperty()isPrototypeOf: ƒ isPrototypeOf()propertyIsEnumerable: ƒ propertyIsEnumerable()toLocaleString: ƒ toLocaleString()toString: ƒ toString()valueOf: ƒ valueOf()__defineGetter__: ƒ __defineGetter__()__defineSetter__: ƒ __defineSetter__()__lookupGetter__: ƒ __lookupGetter__()__lookupSetter__: ƒ __lookupSetter__()get __proto__: ƒ __proto__()set __proto__: ƒ __proto__()
    sessionEntry.js:1 action @@meeting/UPDATE_SESSION_STATE @ 10:41:08.662
    sessionEntry.js:1 prev state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(0), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 0, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "Unknown", …}session: {isInHallway: null, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action {type: "@@meeting/UPDATE_SESSION_STATE", payload: 2, meta: undefined}
    sessionEntry.js:1 next state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(0), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "Unknown", …}session: {isInHallway: null, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action @@session/PROGRESS_TO_HALLWAY @ 10:41:08.693
    sessionEntry.js:1 prev state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(0), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "Unknown", …}session: {isInHallway: null, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action {type: "@@session/PROGRESS_TO_HALLWAY", payload: undefined, meta: undefined}meta: undefinedpayload: undefinedtype: "@@session/PROGRESS_TO_HALLWAY"__proto__: Object
    sessionEntry.js:1 next state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(0), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "Unknown", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action @@device/ADD_DEVICES @ 10:41:08.742
    sessionEntry.js:1 prev state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(0), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "Unknown", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action {type: "@@device/ADD_DEVICES", payload: Array(1), meta: undefined}meta: undefinedpayload: [{…}]type: "@@device/ADD_DEVICES"__proto__: Object
    sessionEntry.js:1 next state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(1), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "Unknown", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action @@screenSharing/SET_SCREENSHARING_STRATEGY @ 10:41:08.746
    sessionEntry.js:1 prev state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(1), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "Unknown", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action {type: "@@screenSharing/SET_SCREENSHARING_STRATEGY", payload: "BrowserNative", meta: undefined}meta: undefinedpayload: "BrowserNative"type: "@@screenSharing/SET_SCREENSHARING_STRATEGY"__proto__: Object
    sessionEntry.js:1 next state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(1), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "BrowserNative", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action @@webcam/STOP_WEBCAM_SHARING @ 10:41:08.761
    sessionEntry.js:1 prev state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(1), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "BrowserNative", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action {type: "@@webcam/STOP_WEBCAM_SHARING", payload: undefined, meta: undefined}meta: undefinedpayload: undefinedtype: "@@webcam/STOP_WEBCAM_SHARING"__proto__: Object
    sessionEntry.js:1 next state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(1), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "BrowserNative", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action @@device/UPDATE_DEVICES @ 10:41:08.774
    sessionEntry.js:1 prev state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(1), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "BrowserNative", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object
    sessionEntry.js:1 action {type: "@@device/UPDATE_DEVICES", payload: Array(1), meta: undefined}meta: undefinedpayload: [{…}]type: "@@device/UPDATE_DEVICES"__proto__: Object
    sessionEntry.js:1 next state {attendee: {…}, audio: {…}, chat: {…}, device: {…}, meeting: {…}, …}attendee: {attendeeDefaults: {…}, attendees: {…}, allAttendeeIds: Array(0), copyInvitationInProgress: false, uncallerNames: {…}, …}audio: {audioMode: "unknown", audioStreamsState: {…}, muteStateTransition: "None", pstn: {…}, voip: {…}}chat: {chatMessageScrollPosition: NaN, messages: Array(0), outgoingMessageQueue: Array(0), privacyMode: false, selectedRecipient: "1", …}device: {devices: Array(1), microphonePermissionState: 0}meeting: {audioInfo: {…}, config: {…}, roomData: {…}, sessionState: 2, timeData: {…}, …}screenSharing: {extensionInstallationStatus: "NOT_YET_STARTED", presenterMode: "Unknown", presenterState: "Inactive", screenSharingActive: false, screenSharingStrategy: "BrowserNative", …}session: {isInHallway: true, audioOnboardingState: "UNKNOWN", conferenceUuid: false, connectionUuid: false, networkConnectionStatus: "ONLINE"}ui: {attendeesView: {…}, dialog: {…}, i18n: {…}, notifications: {…}, peopleSpeakingIndicator: {…}, …}video: {videoState: {…}}webcam: {sharingState: "NOT_SHARING"}__proto__: Object

  • Usually this will have a red entry with a URL/Hostname that is failing. Does not seem like it is the case here though. 

    Maybe you can look in the network section of dev tools to see what request is causing the spinning behavior?

  • OK, this is what I see when inspecting the network tab:

     

    When I click on the 'home.html' I see this under "response": 

    <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>GoToMeeting</title><meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telephone=no"><link rel="shortcut icon" href="app.gotomeeting.com/.../favicon.ico"><link rel="stylesheet" href="//weblibrary.cdn.getgo.com/togo/6.3.4/styles/togo.css"><link rel="chrome-webstore-item" href="chrome.google.com/.../gcgikpombjkodabhbdalkcdhmllafipp"><link rel="stylesheet" href="app.gotomeeting.com/.../sessionEntry.main.css"><script>gotoconfig={env:JSON.parse('"prod"'),invitationEnv:JSON.parse('"live"'),appName:JSON.parse('"GoToMeeting Web App"'),browsers:JSON.parse('{"supported":{"Chrome":23,"Chromium":23,"Firefox":53,"UCBrowser":7,"Vivaldi":1},"supportedBeta":{"Edge":15,"IE":10,"Opera":45,"Safari":10},"features":{"voip":{"Chrome":23,"Chromium":23,"Edge":15,"UCBrowser":7,"Vivaldi":1},"webcam":{"Chrome":23,"Chromium":23,"UCBrowser":7,"Vivaldi":1},"webcamview":{"Chrome":23,"Chromium":23,"UCBrowser":7,"Vivaldi":1},"screensharing":{"Chrome":34,"Chromium":34,"Firefox":53,"UCBrowser":7,"Vivaldi":1},"networkIndicator":{"Chrome":23,"Chromium":23,"UCBrowser":7,"Vivaldi":1}}}'),meetings:JSON.parse('{"cacheSize":100,"cacheMaxAge":15000,"baseUrl":"global.gotomeeting.com","globalApiUrl":"https:/.../ class="nebula nebula-g2m" id="g2m-bg"><div class="layer background-color"></div><div class="layer gradient-1"></div><div class="layer gradient-2"></div><div class="layer gradient-3"></div><div class="layer gradient-4"></div><div class="layer gradient-5"></div></section><section class="nebula hide" id="default-bg"><div class="layer background-color"></div><div class="layer gradient-1"></div><div class="layer gradient-2"></div><div class="layer gradient-3"></div><div class="layer gradient-4"></div><div class="layer gradient-5"></div><div class="layer gradient-6"></div><div class="layer gradient-7"></div><div class="layer gradient-8"></div></section><script async src="www.googletagmanager.com/.../js Date),window.gtag("config","UA-43701464-2",{custom_map:{dimension1:"useragent",dimension2:"version"},anonymize_ip:!0}),window.gtag("event","useragent_dimension",{useragent:window.navigator.userAgent}),window.gtag("event","version_dimension",{version:"13.6.12"}),window.localStorage&&(0<=window.location.search.indexOf("high-contrast-mode=true")&&window.localStorage.setItem("high-contrast-mode",!0),0<=window.location.search.indexOf("high-contrast-mode=false")&&window.localStorage.removeItem("high-contrast-mode"),window.localStorage.getItem("high-contrast-mode")&&document.body.classList.add("high-contrast-mode"))</script><div id="screenSharingDiv"></div><div id="applicationHost" role="main"><div class="splash"><div class="row"><div class="col-sm-12 text-center"><img class="fade in" src="app.gotomeeting.com/.../g2m.png" width="125px"></div><div class="col-sm-12 text-center"><div class="loading-indicator"></div></div></div><noscript><div class="noscript-wrapper"><div class="noscript-content"><div class="noscript-header">JavaScript is disabled</div><div class="noscript-text">Please enable JavaScript in your browser to use this service.</div><a href="www.enable-javascript.com/" target="_blank">How to enable JavaScript?</a></div></div></noscript></div></div><div id="reactRoot"></div><script src="//cdn.jsdelivr.net/g/mutationobserver/"></script><script src="https://app.gotomeeting.com/13.6.12/scripts/sessionEntry.js"></script></body></html>

    And this under 'headers':

    Request URL: app.gotomeeting.com/.../home.html
    Request Method: GET
    Status Code: 403 Forbidden
    Remote Address: 52.84.64.26:443
    Referrer Policy: no-referrer-when-downgrade
    Accept-Ranges: bytes
    Cache-Control: no-store, no-cache, must-revalidate
    Connection: keep-alive
    Content-Encoding: gzip
    Content-Length: 2109
    Content-Type: text/html; charset=UTF-8
    Date: Mon, 18 Feb 2019 17:27:55 GMT
    ETag: "90bb5fac5f7bb398405ebbffaac133f0"
    Last-Modified: Mon, 11 Feb 2019 13:13:17 GMT
    Server: AmazonS3
    Via: 1.1 3236cbfeb05b5e6a80bfe05dfc656559.cloudfront.net (CloudFront)
    X-Amz-Cf-Id: ve1cvfLp5bY9dZ9l7kKIlpzJeUoT62Bu-0bPAlE-kVbwvpY7amLbPA==
    X-Cache: Error from cloudfront
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
    Accept-Encoding: gzip, deflate, br
    Accept-Language: en-US,en;q=0.9
    Connection: keep-alive
    Cookie: _ga=GA1.2.1592403096.1550168509; i18next=en; _gid=GA1.2.1514316105.1550507786; _gat_gtag_UA_43701464_2=1
    Host: app.gotomeeting.com
    Referer: app.gotomeeting.com/.../home.html
    Upgrade-Insecure-Requests: 1
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.81 Safari/537.36

  • Can you put this into your browser directly and see if you get a blockpage?

    https://app.gotomeeting.com/join/home.html

    if not maybe one of those hosts that are listed in the home.html output need to be bypassed. Can you correlate this with the webfilter/malware logs?

Reply Children
  • I do not get a block page going directly to https://app.gotomeeting.com/join/home.html. I get the same cycling window I screen captured earlier. 

    I tried to go to getgo.com, and was not blocked. I was redirected to logmeininc.com. https://www.jsdelivr.com/ works too. I didn't see any other domains that I could check. 

    I went through the log and filtered by the IP of the machine I am using and there was NO blocked traffic logged...so I'm kinda stumped here. 

     

     

  • So it isn't a URL filtering issue, can we try adding each of the domains listed in that HTML to the HTTPS exceptions? Then testing again?

  • I added a few more domains, the rules for bypassing SSL inspection are now:

    ^([A-Za-z0-9.-]*\.)?jsdelivr\.com/?
    ^([A-Za-z0-9.-]*\.)?joingotomeeting\.com/?
    ^([A-Za-z0-9.-]*\.)?gotomeeting\.com/?
    ^([A-Za-z0-9.-]*\.)?citrixonline\.com/?
    ^([A-Za-z0-9.-]*\.)?qualtrics\.com/?
    ^([A-Za-z0-9.-]*\.)?citrix\.com/?
    ^([A-Za-z0-9.-]*\.)?gotomeet\.me/?
    ^([A-Za-z0-9.-]*\.)?gotomeet\.at/?
    ^([A-Za-z0-9.-]*\.)?openvoice\.com/?
    ^([A-Za-z0-9.-]*\.)?getgo\.com/?
    ^([A-Za-z0-9.-]*\.)?goto-rtc\.com/?
    ^([A-Za-z0-9.-]*\.)?cloudfront\.net/?

    Note, I added CloudFront even since it was listed in the headers of the home.html. But, I'm not crazy about bypassing all of CloudFront!

    All that being said, still failing :(

  • Can you try adding enable-javascript.com and the google domains as well as a test?

    Last thing I would check is if pharming protection is enabled. Try disabling that as well. 

    Do you see anything in the IPS/APP log for this source IP?

  • So the 403 is basically it complaining you don't have javascript enabled.  Which probably means it is doing some detection which is failing.  That could be an underlying issue, or it could be unrelated.
    A few suggestions, in order of usefulness.
    1) The F12 Developer tools should give you a bunch of information, but you can get more by running WireShark on the computer and looking at the actual packets.  Look for drops and especially for incomplete SSL handshakes.
    2) Close all instances of Chrome.  Start Chrome with the following command:
    "C:\Users\michaeldunn\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --ignore-certificate-errors
    You should be a bar at the top warning you about unsupported option - if you do not, make sure Chrome is fully quit before starting it like this.  This will make Chrome not care about any certificate issues.  See if it works then.  If it does, quite Chrome (make sure it closes connections so that the proxy logs) and then take a look at the web filter log and see if there are any domains that it is going to that you did not have in your exception.
    3)
    Add the following exception:
    .*\.com
    Now try it with the big hammer exception.  If it works, see if you can modify it to narrow it down.
    4)
    In WebAdmin, start the Log Viewer.  Click the icon to switch to detailed view.  Select only the Web Filter log.  While it is in its broken loop, watch the web log.  Anything interesting?  You can also post it here.  Note that if the client starts an SSL connection but never completes the handshake (eg because it does not like the certificate) it will not print anything here.
     
     
    Actually I had one more thought before any of that.  In Chrome go to chrome://extensions/  Temporarily disable all extensions, and try.
  • So...I am bringing this thread back to life because this problem is still happening. We worked around it for a bit by using edge, but now that it is chrome based, this is broken again. I tried adding the exceptions for enable-javascript.com, and looked through the GUI log to find another URL that was being used, launchdarkly.com and added that too. No change. When I added the .*\.com exception as Michael Dunn proposed, it worked! However, I am not sure how to narrow it down from that...and I obviously can't leave that in place. 

    So, I installed Wireshark and ran a capture when the .*\.com rule was disabled and one when it was enabled. I looked through the captures, but my limited knowledge of Wireshark came up short...I just can't find an appreciable difference that I can use to figure this out. I saved the captures, so if someone is willing to look at them, I can send them out to a trusted party. 

    It seems to be an issue with the gotomeeting app itself in that even if I close chrome, the app is still open, and it still fails. This has to be some kind of traffic modification that the sophos is doing that the app doesn't like...I just can't find anything in any log that would point me in the right direction...Does no one else have this issue with SSL inspection and GoToMeeting???