When opening a new application in a new browser tab we are getting a CAM proxy error. The error doesn't occur when going to the application in the currently open tab.
The following messages are seen in the debug logs at the time the error occurs:
Client verification failed: illegal client IP address '192.168.1.1' does not match original '192.168.1.2'
Session not allowed from this location
This error occurs when a user logs in to CAM on one IP, but then changes IP during the session. This is to prevent session hijacking and is a security feature. It's possible to see this error if there are multiple load balancers in front of the proxies and you're using applications that are set up to go through different load balancers.