Site shows no authentication field by XG

Question

Hello. I'm trying to access this www.unihosp-ma.com.br/.../ link, through the XG, only that the page does not appear the authentication field when it should. I tried another location that does not have web filter, and the login screen appears, or is some setting in my XG I can not identify. Can someone help me??

This thread was automatically locked due to age.

sachingurung · Accepted Answer

Hi Carlos, 
 I will try to keep it simple. Configure an FQDN based Firewall Rule and keep Web Filter and Application Filter set to "None". Please refer: https://www.sophos.com/en-us/support/knowledgebase/123035.aspx . 
 Thanks

Michael Dunn · Answer

FYI the site in question replies with invalid headers that the proxy is rejecting. I don't know any more about what is wrong with the headers and why they are rejected. Potentially the XG is correct in its behavior because changing to allow this invalid-ness causes other issues. 
 The "more correct" thing would be to raise this as a defect to that webmaster. 
 I have raised the issue internally for investigation however it has more "weight" if it is raised from support. 
 The problem with internet standards is that even when websites don't follow them, we are expected to support them.

Michael Dunn · Answer

Underlying issue. Do this with no proxy. 
 curl -v ' www.unihosp-ma.com.br/.../' -o /dev/null 
 < Date: Mon, 13 Jun 2016 22:14:44 GMT < Server: Apache/2.2.11 (Win32) PHP/5.3.0 < X-Powered-By: PHP/5.3.0 < Set-Cookie: PHPSESSID=9qt520vd2rc4f1aqlgqmdf9847; path=/ < Expires: Thu, 19 Nov 1981 08:52:00 GMT < Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 < Pragma: no-cache < LozalizaC'C#o: ./ < Set-Cookie: PHPSESSID=j7trn191k6ulptlso885she2p4; path=/ < Content-Length: 6418 < Keep-Alive: timeout=5, max=100 < Connection: Keep-Alive < Content-Type: text/html 
 See the line starting "Local" that is corrupted. That is a problem with the far server. 
 On our side, we are not handling the corrupted line as well as we could. This will be improved in a later version.