Technical Tip: Identify the issue of prohibiting user's IP address from HAR log file

[tino_p]

Description	This article describes the method to identify the issue of prohibiting users' IP addresses when accessing the website, based on the HAR log file. For example, when searching for the tracking number: ie, 11250306009 on https://www.kuaidi100.com/all/wxjzwl.shtml there is no visible result. Besides, the issue only happens when accessing the website from behind the FortiGate Firewall.
Scope	FortiGate.
Solution	Collect HAR file when searching the tracking ID and compare between working and non-working cases. In a working case: Checking the query with postid = 11250306009, its response has a message of 'OK'  In a non-working case: Checking the query with postid = 11250306009, its response has a message of 'Illegal access: IP prohibited access' => It indicates that the website has either a block policy for the user's IP address or country location.   As a workaround, it is possible to use a different IP pool (with a different WAN IP address) or to use a different IP location to get the results.