topic Re: Error login in back pages in General Topics

Error login in back pages

soporteseguridad — Tue, 23 Aug 2016 13:13:59 GMT

Re: Error login in back pages

soporteseguridad — Tue, 23 Aug 2016 13:14:14 GMT

Re: Error login in back pages

TranceforLife — Thu, 18 Aug 2016 13:24:43 GMT

Interesting...

Is this PCAP from the client side?

Can you please post a magnified session screenshot when you are trying to access this site.

Re: Error login in back pages

BPry — Thu, 18 Aug 2016 13:25:48 GMT

What does the PAs traffic and Threat logs say?

Re: Error login in back pages

soporteseguridad — Tue, 23 Aug 2016 13:14:33 GMT

Re: Error login in back pages

soporteseguridad — Mon, 22 Aug 2016 07:52:17 GMT

It seems like brazilian banks are changing the webs and they are not using java in new webs. I dont know if this could be the problem. Did you see this before???

Re: Error login in back pages

santonic — Mon, 22 Aug 2016 11:28:50 GMT

In your PCAP i can see only 1 way traffic. Would be easier to debug from whole session. I'd suggest capturing whole session and then filtering out just one session starting with SYN packet.

Ok, i'm just guessing here; but is the bank checking client certificate? And are you using proxy? If you answered both yes, try alloing direct connections for this bank and see if it works.

Re: Error login in back pages

santonic — Mon, 22 Aug 2016 11:29:55 GMT

Another thing which would change user certificate would be SSL decryption but from your screenshot I see you aren't using that.

Re: Error login in back pages

soporteseguridad — Tue, 23 Aug 2016 13:14:48 GMT