Product defect 340569 and 418170.
The issue is that the client after a redirection waits for more than 10 sec and the redirection cache will be purged for this short period.
If the DNS server is fake or got a valid name or NX record, the issue will not come up.
The connection between the default route and this issue is that the proxy tries to resolve the client address with a reachable DNS before the auth cache has been checked and because there is another issue in the DNS timeout here: 418170 the maximum 10 sec has been reached by the second issue.
© 2023 One Identity LLC. ALL RIGHTS RESERVED. Feedback Nutzungsbedingungen Datenschutz Cookie Preference Center