CNA not working on v6 General questions and topics about hsnm

[spike]

Hi Team,

After upgrade to 6.0.154 we're getting multiple sites calling that CNA is not working for ios and android devices.

Is there a setting change anywhere that may of stopped CNA from working?

[HSNMSupport]

Hi spike,

we were aware of this problem and it has been solved with new HSNM update published this morning (6.0.155).

Best Regards.

[spike]

Hiya,

What was the issue, I've found a *.gstatic.com allow inside my System - Walled Garden. Which we wouldn't generally do (we do a few sites, but not *.gstatic.com!) I see the addition of explicit deny rules for connectivitycheck and clients1, clients3.google.com but suspect gstatic is still a major.

What was your issue, I thought it was the gstatic and I'm hesitant to upgrade after just running the gauntlet on the last upgrade and finally getting sync!

Might I suggest though you move the deny rules to the top of the Walled Garden Chain!?

[HSNMSupport]

Hi spike,

the problem was that, due to the latest Apple iOS updates, the CNA didn't work well. We didn't find any problem with Android.

we have always set *.gstatic.com as walled garden because it's required by social networks. So, if you provide social login, that walled garden is set.
The others mentioned walled garden have always been set when CNA is enabled.

About your suggestion to move deny rules to the top of the chain, I'll forword it to developers.

Best Regards.