Umbrella causing users to appear as coming from IP address(es) with bad reputation

from_afar
Building a reputation

Umbrella causing users to appear as coming from IP address(es) with bad reputation

A few days ago I started getting complaints from users that they were having problems getting into American Express website. The homepage would load, or partially load and the login page would only ever partially load. Upon getting access to a users machine, I was able to see the requests that were failing in the dev console. All of the failing requests were for assets like javascript, css, images, etc. and were to an Akamai domain. 

 

As a last resort, I tried reaching out to Akamai. I found a supposed reputation checker from them but could not get it to work so I emailed them asking about that and to ask if there was some other way to IP reputation. They responded that the ip address that we have statically assigned by our ISP was not the IP that was being observed by them ( they saw us as coming from 155.190.7.19 which whois designates as being part of Umbrella). It looks like from checking a couple of IP reputation websites that this IP is detected as a proxy which might hurt reputation. 

 

Is there a way to get Umbrella to not change the users IP address for certain domains? I tried adding both the Amex site as well as edgesuite Akamai domain to the Umbrella policy destination whitelists as well as the destination whitelists and domain management > external domains but the Amex website was still not loading. 

2 Replies 2
Brash
Kind of a big deal
Kind of a big deal

I've experienced this too with Akamai reporting a poor reputation for some Umbrella SWG IP addresses.

To bypass SWG and use your public IP address, you can add the website to your external IP's list in Umbrella.

 

Deployments -> Domain Management -> External Domains & IPs

from_afar
Building a reputation

Thanks for the reply.

 

Unfortunately I have tried this and also tried adding them to the specific whitelists but neither have fixed the issue. 

Get notified when there are additional replies to this discussion.