08-18-2016 01:10 AM - edited 08-23-2016 06:13 AM
08-18-2016 06:04 AM - edited 08-23-2016 06:14 AM
08-18-2016 06:22 AM - edited 08-18-2016 06:24 AM
Interesting...
Is this PCAP from the client side?
Can you please post a magnified session screenshot when you are trying to access this site.
08-18-2016 06:25 AM
What does the PAs traffic and Threat logs say?
08-18-2016 06:48 AM - edited 08-23-2016 06:14 AM
08-22-2016 12:52 AM
It seems like brazilian banks are changing the webs and they are not using java in new webs. I dont know if this could be the problem. Did you see this before???
08-22-2016 04:28 AM
In your PCAP i can see only 1 way traffic. Would be easier to debug from whole session. I'd suggest capturing whole session and then filtering out just one session starting with SYN packet.
Ok, i'm just guessing here; but is the bank checking client certificate? And are you using proxy? If you answered both yes, try alloing direct connections for this bank and see if it works.
08-22-2016 04:29 AM
Another thing which would change user certificate would be SSL decryption but from your screenshot I see you aren't using that.
08-23-2016 02:00 AM - edited 08-23-2016 06:14 AM
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
