Replaced NETGEAR FVS336G with NETGEAR SRX5308 how i can't access login.salesforce.com

[ajinc]

Hello All

I replaced FVS 336G with SRX5308 for testing, PSEC VPN works fine, local networks acces to shares works fine, internet works fine but I am having an issue with accessing salesforce.com actually login.salesforce.com. I posted this before and I thought I had it resolved due to a pc that was having network issues causing acces to salesforce to fail. Once i pulled that pc off network access to salesforce returned so I replaced the FVS336 back in production and things were fine. Well  the FVS VPN access started to become flukey so I reinstalled the SRX 5308 but out of 6 pc's 5 of them can't get to login.salesforce.com. all pc's are connected to a 16 port switch that is connected to the SRX 5308 have same gateway / dns /  network settings. Most of the time you get "page not found" or "ERR login.salesforce.com neo sending data"

Stange if I put the IP for login.salesforce.com 96.43.148.27 in the browser (chrome)  the salesforce login screen comes up and I can login but before it comes up I get a security error screen Your connection is not private Attacker might be trying to stealyour information from 96.43.148.27 This server could not provethat it is 96.43.148.27 it's security certificate is from login.salesforce.com. This may be caused by a misconfiguration or an attacker intercepting your connection"

Then a link to "continue to 96.43.148.27 and I can login to salesforce.

Using I.E. 11 I get the same functionality when I use the ip address instead of the FQDN I get a security cert error msg the I can click the link to continue to the salesforce site. Any idea why this would occur with the SRX 5308? If I put the FVS 336 back in I have no problem accessing salesforce on any pc.

Thanks for any thoughts.

Mac

[Dan_Z]

Hi,

Welcome to the community!

Here is my questions:
1.Which version of fvs336g and srx5308?
2.Is there have content filtering to block special keyword?
3.Try to perform DNS lookup for "login.salesforce.com" on srx5308 (Under Monitoring->Diagnostics->DNS lookup),
if dns lookup failed,try to change dns server.

Thanks.

[ajinc]

Hi Dan_Z

Thanks for your reply & Time.

1. They are both version 1

2. No content filters

3. DNS Info

      PING login.salesforce.com (96.43.149.27): 56 data bytes
64 bytes from 96.43.149.27: seq=0 ttl=245 time=19.737 ms
64 bytes from 96.43.149.27: seq=1 ttl=245 time=18.059 ms
64 bytes from 96.43.149.27: seq=2 ttl=245 time=14.337 ms
64 bytes from 96.43.149.27: seq=3 ttl=245 time=17.912 ms

--- login.salesforce.com ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 14.337/17.511/19.737 ms

Any ideas as to why the salesforce siet is generating the security certificate warnings in I.E and Chrome on the SRX 5308 ( does not occur when the fvs336g is being used)

Thank You

[Dan_Z]

Hi,

Did you tried to clear browser's cache? Have same issue after clearing the cache?

Thanks

[KevinDSergel]

The "Your connection is not private" error appears when something blocked SSL connections or it could be invalid cookies.

Here are several ways you may use to resolve or bypass it.

https://usefulpcguide.com/16666/your-connection-is-not-private/

[ajinc]

Yes I did do that with no success.