Skip to main content

SHIELD Gate User Log Error Response Guide

SHIELD Gate Integrated Log 중User LogeventWARNorERRORThis is a customer operation guide that summarizes the meaning and response procedures when recorded at a level.


Table of Contents


1. Overview

1.1 Log Level Classification

levelMeaning
INFONormal operation or general event log. No separate action required.
WARNA situation that does not directly affect service usage but is worth checking.
ERRORFunction execution failed. Cause identification and response needed.

1.2 Scope of This Guide

  • This guide covers user logs.ERROREvents that can trigger a levelThis explains the detailed response limited to __PH_0__.
  • alwaysINFOThe list of events recorded in Roman is5.1 AppendixReference.

2. User Log Event Summary

The table below shows all events of the SHIELD Gate user log andERRORThis is a summary of the possibility of level occurrence.

ClassificationEvent CodeEvent NameERROR occurredResponse Section
AuthenticationCALLBACK_SECURITY365_CODELogin⚠️ (※1)
POST_SIGN_OUTLogout3.1
POST_RELAY_TOKENService Migration3.1
NAVIGATE_TO_ADMIN_PAGEGo to the admin page
Isolated BrowserPOST_INQUIRY_WORK_ITEM_ACCESS_URLBrowser Access
RBI_URL_CHANGEDAfter accessing the browser, navigate
RBI_CHECK_INPUT_TEXTUser Input Sensitive Information Check
RBI_CLIPBOARD_ACCESS_RB2PCCopying in a sandboxed browser
RBI_CLIPBOARD_ACCESS_PC2RBPasting in a sandboxed browser
RBI_USAGE_ERRORIsolation Browser Error3.6 / 4
RBI_SESSION_TIMEOUTIsolated Browser Session Timeout
RBI_KEYBOARD_INPUTKeyboard Input Blocking
PersonalizationPOST_FAVORITE_ITEMRegister as a favorite3.2
DELETE_FAVORITE_ITEMDelete Bookmark3.2
fileRBI_FILE_UPLOADFile Upload3.4
RBI_FILE_DOWNLOADFile Download3.5
RBI_FILE_VIEWER_REQUESTSHIELD Viewer Request
Top BarGET_EXTERNAL_INTERFACE_ACCESS_URLAccessing External Links from the Top Bar3.3

※1 CALLBACK_SECURITY365_CODEGuideThe login event isonly if the login is successfulIt will be recorded. The login failure itself cannot confirm user information, so a separateERRORIt will not be logged. If login failures occur repeatedly, please contact SOFTCAMP.


3. Response Guide by ERROR Occurrence Event

"Responsible" notation guidelines in the table 사용자- Re-login, retry, check environment, etc. are within the scope that can be resolved by oneself.고객사 관리자— Scope that can be resolved through inspection and configuration in the customer's operational area, including policies, permissions, firewalls, DNS, and certificates.대상 사이트 측— Scope of Responsibility for External Websites Accessed via Isolated Browser소프트캠프— Scope that requires inquiry due to internal service issues


3.1 POST_SIGN_OUT / POST_RELAY_TOKEN (Log Out / Service Transfer)

🔧 **Summary of Responsibility Division —소프트캠프 영역This event'sERRORisOccurs solely due to internal service issues.**There are no cases triggered by customer settings, and without any action items from the customer side.Contact SOFTCAMP directlyTarget.

itemContent
EventPOST_SIGN_OUT— SHIELD Gate Logout
POST_RELAY_TOKEN— Move to the SHIELD Gate admin page from the Security365 management center
General CharacteristicsOccurs only due to internal service issues. There are no cases triggered from user/client settings.

3.1.1 Possible Causes

#CausePerson in charge
1Temporary outage of internal data storageSOFTCAMP
2Authentication Service Integration ErrorSOFTCAMP
  1. **[User]**Retry the same task after re-logging in.
  2. **[Client Administrator]**Check if the same error occurred for other users in the same time zone (to determine if it's an infrastructure issue)
  3. If the same symptoms persistSOFTCAMP Inquiry

3.2 POST_FAVORITE_ITEM / DELETE_FAVORITE_ITEM (Register / Delete Favorite Item)

🔧 **Summary of Responsibility Division —소프트캠프 영역This event'sERRORisOccurs only due to issues with the internal data storage of the service.**It is a subject for inquiry to SOFTCAMP without any action items from the client side.

itemContent
EventPOST_FAVORITE_ITEM— Register as a favorite
DELETE_FAVORITE_ITEM— Delete Bookmark
General CharacteristicsMainly occurs due to issues with internal data storage of the service.

3.2.1 Possible Causes

#CausePerson in charge
1Internal data storage connection errorSOFTCAMP
2Other Service Internal ExceptionsSOFTCAMP
  1. **[User]**Retry in a moment
  2. When Repeated OccurrencesSOFTCAMP Inquiry

🔧 Summary of Responsibility Division —고객사 관리자 1차 점검first roundExternal Link Settings for Customer Administrator's Top BarCheck it. If it occurs despite the settings being normal, contact SOFTCAMP.

itemContent
EventThe action of a user clicking a custom button set by the administrator on the top bar of the user page to access an external URL.

3.3.1 Possible Causes

#CausePerson in chargeNote
1Called when the external link in the top bar is not set.Customer Company AdministratorIt is usually not encountered as it is pre-blocked in the admin page UI.
2Internal data storage retrieval errorSOFTCAMP
  1. **[Client Administrator]**Check if the custom button is properly registered in the top bar settings of the admin page.
  2. If it occurs repeatedly despite normal settingsSOFTCAMP Inquiry

3.4 RBI_FILE_UPLOAD (File Upload)

🔧 Summary of Responsibility Division —외부 사이트 / 사용자 환경 1차 점검Most cases areIssues on the target site for uploadorNetwork Environment Issues of User PCThe number one cause. Only failures related to SHIELD Drive should be directed to SOFTCAMP after verifying permissions and authentication.

Issues occurring during the file upload process through the isolated browserERRORThis is the log. The cause varies depending on the upload path, so it is explained in four cases below.

3.4.1 [Case A] Uploading a Site Accessed via Isolated Browser from Local PC

Occurs when a user uploads a local file attached to a site opened in an isolated browser.

#Cause of OccurrencePerson in chargeHow to check
1Abnormal response from the upload target site server (temporary site outage, authentication expiration, violation of file size/type policy, etc.)Target site sideuser**Directly access the target site and upload the same file.**Compare if the same symptoms occur in poetry
2Network Disconnection / CORS / Request Failure Due to DNS FailureUser / Customer AdministratorCheck user PC network status, VPN connection, firewall policy
3The target site responds in a format other than JSON (such as an HTML error page).Target site sideThere is a high possibility of issues on the target site.

Recommended Actions

  1. Directly access the target site from the user's PC to compare if the same file upload is functioning correctly.
  2. If direct access also fails → Consider it an issue on the target site's side.
  3. If direct access is normal but fails only in the isolated browser →SOFTCAMP Inquiry

3.4.2 [Case B] SHIELD Drive File → Isolated Browser Site (Failed to Import SHIELD Drive File)

When the user selects a file in the SHIELD Drive dialog to upload to the isolated browser site,Steps to Retrieve Original Files from SHIELD Drivefailed at

#Cause of OccurrencePerson in chargeAction
1SHIELD Drive certification has expired or the token is invalid.UserRe-login after logging out
2The user does not have permission to access the file.Customer Company AdministratorGranting File/Folder Access Permissions
3The file has already been deleted or moved from the SHIELD Drive.UserCheck file existence in SHIELD Drive and retry
4SHIELD Drive Service Internal ErrorSOFTCAMPSOFTCAMP Inquiry

3.4.3 [Case C] SHIELD Drive File → Isolated Browser Site (Target Site Upload Step Failed)

It follows the same flow as Case B, butAfter successfully retrieving files from SHIELD DriveFailed at the stage of uploading to the site accessed with the isolation browser.

#Cause of OccurrencePerson in chargeHow to check
1Abnormal response from the target site serverTarget site sideCompare whether the same symptoms occur by directly accessing the target site.
2Network Disconnection or CORS ErrorCustomer Company AdministratorNetwork / Firewall Policy Check

3.4.4 [Case D] Multiple File Upload (Asynchronous Failure)

When uploading multiple local files or SHIELD Drive files at once, the upload response handling stage fails for some files.

  • Cause and Action CriteriaCase Aand the same
  • Check whether only specific files are failing repeatedly or if the entire batch is failing simultaneously.

3.5 RBI_FILE_DOWNLOAD (File Download)

🔧 Summary of Responsibility Division —혼합 (SHIELD Drive 저장은 관리자 영역 비중 큼)Download policy trigger failure (Case A) and SHIELD Drive upload network failure (Case B) areSOFTCAMP Processing Area. SHIELD Drive save response error (case C) is mostlyCustomer Administrator's Storage / Permissions / Extension Policy SettingsArea.

Issues that occur during the file download process through the isolation browser.ERRORThis is the log. It is categorized into the following three cases based on the download save location (local PC / SHIELD Drive) and the point of failure.

3.5.1 [Case A] Download Policy Trigger Failure

When the user clicks the file download button on the isolated browser site, the SHIELD Gate backend'sDownload Policy Processing Stepsfailed at

#Cause of OccurrencePerson in charge
1SHIELD Gate server internal error (temporary file creation failure, data storage error, etc.)SOFTCAMP
2Error in the step of receiving files from the isolated browser containerSOFTCAMP
3Unclassified ExceptionSOFTCAMP

Recommended Actions

  1. **[User]**Attempt to re-download the same file
  2. If other files download normally but a specific file keeps failing, provide the information about that file along with it.SOFTCAMP Inquiry

3.5.2 [Case B] Download to SHIELD Drive Repository — Network / HTTP Exception

In an environment using SHIELD Drive, the process of storing downloaded files from isolated browser sites to SHIELD Drive.SHIELD Drive upload API call itself failedin case.

#Cause of OccurrencePerson in charge
1SHIELD Gate Server / Isolated Browser Container File Processing ErrorSOFTCAMP
2Temporary network exceptions such as server downtime, timeouts, etc.SOFTCAMP

Recommended Actions

  1. **[User]**Retry in a moment
  2. If multiple users experience the same symptoms at the same time → possibility of infrastructure issues
  3. When Repeated OccurrencesSOFTCAMP Inquiry

3.5.3 [Case C] Download to SHIELD Drive Storage — Response Business Code Failure

The same flow as Case B, but**The API call was successful, but the response from SHIELD Drive is abnormal.**in case.

#Cause of OccurrencePerson in chargeAction
1SHIELD Drive storage has not been created.Customer Company AdministratorCreating SHIELD Drive Storage
2SHIELD Gate does not have access permission to the specified storage.Customer Company AdministratorStorage Access Permission Settings
3The file name violates the SHIELD Drive naming convention.UserRetry after renaming the file
4User storage capacity exceededCustomer Company AdministratorFile Organization or Capacity Expansion
5SHIELD Drive does not support/block the corresponding extension.Customer Company AdministratorCheck SHIELD Drive Extension Policy
6Upload failure of file storage integration serviceSOFTCAMPSOFTCAMP Inquiry
7SHIELD Drive internal upload processing failureSOFTCAMPSOFTCAMP Inquiry
8There is no company or user information in SHIELD Drive.Customer Company AdministratorCheck User Provisioning Status
9Failed to retrieve storage informationSOFTCAMPSOFTCAMP Inquiry
10SHIELD Drive storage disabled stateCustomer Company AdministratorStorage Activation
11No upload permission for SHIELD Drive storageCustomer Company AdministratorGranting Upload Permissions
12Attempt to download an empty file (0 byte)UserCheck the original file
13Other Unclassified ExceptionsSOFTCAMPSOFTCAMP Inquiry

Recommended Actions

  1. Administrator settings series (1·2·5·8·10·11) should first check and supplement the settings.
  2. If it occurs after normal settingsSOFTCAMP Inquiry

3.6 RBI_USAGE_ERROR (Isolation Browser Error)

This event encompasses all system errors that occurred while using the isolation browser.errorDetailThe specific cause is distinguished by the value, and the detailed classification and response areChapter 4 RBI_USAGE_ERROR Detailed Code GuidePlease refer to __PH_0__.


4. RBI_USAGE_ERROR Detailed Code (errorDetail) Response Guide

RBI_USAGE_ERRORRecorded with eventserrorDetailIdentifying specific causes by field. The classification system consists of the following 8 groups.

GroupClassificationMain CharacteristicsPrimary Responsibility Area
AContainer / Session creation and allocation failureRBI Resource Allocation StageUser (Tab Limit) orSOFTCAMP
BSession Entry / Validation FailureAbnormal User Session StatusUser Re-entry → When RepeatingSOFTCAMP
CPolicy Inquiry / Judgment FailurePolicy Service IntegrationSOFTCAMP(FAILED_NAVIGATED_PAGE includes the target site)
DContainer Connection StatusRuntime DisconnectionAdministrator action results orSOFTCAMP
EHealth check failedIsolated Browser Instance Startup StatusCustomer Administrator (Firewall/DNS)+ SOFTCAMP
FBrowser EnvironmentChrome version of the user's PCUser / Client Administrator (Update Policy)
GChrome Network Layer ErrorIsolated Browser → External Site SectionClient Administrator (Network and Security Inspection) / Target Site Side
HDefault (Fallback)Unclassifiable ExceptionSOFTCAMP

💡 Operating TipsGroup G is the group that shows the largest proportion as the number of users increases, and**Most customer network and security equipment checks can be resolved in the first instance.**Checklist(4.8.2If the issue is not resolved even after performing the above steps, it can be quickly addressed by contacting SOFTCAMP.

4.1 AllerrorDetailIndex

GrouperrorDetailOne-line summary
AFAILED_CREATING_CONTAINERFailed to call the API to create a sandbox browser container
AERROR_GET_CONTAINER_URLFailed to obtain container URL (Representative code for exceptions other than classification)
AERROR_GET_CONTAINER_URL_REASSIGNContainer URL reassignment path failure
AMAXIMUM_PODS_REACHEDIsolation Browser Cluster Capacity Exceeded
AMAXIMUM_TABS_REACHEDUser/Tenant Concurrent Open Tab Limit Exceeded
BNO_TAB_ID_SESSIONNo session identifier or mapping (abnormal entry)
BMISSING_SESSION_DATANo session context (expired / mismatch)
BMISSING_CURRENT_URLThe URL for isolation target is empty.
CPOLICY_QUERY_FAILEDFailed to retrieve policy server
CFAILED_NAVIGATED_PAGEAllowed URL but actual page navigation failed
DCONTAINER_DISCONNECTEDReal-time Disconnection of Isolated Browser Container
DSESSION_TERMINATED_BY_ADMINAdministrator Force Logout
EHEALTH_CHECK_NETWORK_ERRORFailed to reach isolated browser instance (TCP/TLS)
EHEALTH_CHECK_TIMEOUTDelayed health check response for isolated browser instance
FBROWSER_VERSION_UPDATE_REQUIREDChrome minimum version not met
GERR_TIMED_OUTTotal Request Timeout
GERR_NETWORK_CHANGEDNetwork Switching (Wi-Fi ↔ LAN, VPN Reconnection)
GERR_CONNECTION_CLOSEDConnection terminated during transmission
GERR_CONNECTION_RESETServer/Path Device RST Transmission
GERR_CONNECTION_REFUSEDTarget port not listening
GERR_CONNECTION_ABORTEDAbnormal termination of connection (client perspective)
GERR_CONNECTION_FAILEDGeneral connection failure
GERR_NAME_NOT_RESOLVEDDNS lookup failed
GERR_INTERNET_DISCONNECTEDNo client internet connection
GERR_SSL_PROTOCOL_ERRORTLS handshake failure
GERR_ADDRESS_INVALIDIncorrect IP / Host Notation
GERR_ADDRESS_UNREACHABLERouting unreachable
GERR_SSL_CLIENT_AUTH_CERT_NEEDEDmTLS Client Certificate Requirement
GERR_TUNNEL_CONNECTION_FAILEDHTTP CONNECT Proxy Tunneling Failure
GERR_NO_SSL_VERSIONS_ENABLEDNo available TLS version
GERR_SSL_VERSION_OR_CIPHER_MISMATCHTLS Version / Cipher Suite Negotiation Failure
GERR_CONNECTION_TIMED_OUTTCP Connection Establishment Timeout
GERR_PROXY_CONNECTION_FAILEDFailed to connect to the configured proxy
GSSL_CERTIFICATE_ERRORServer Certificate Validation Error
GERR_CERT_AUTHORITY_INVALIDUntrusted Issuing CA
GERR_EMPTY_RESPONSEConnection closed by the server without a response
HUNKNOWN_SYSTEM_ERRORDefault value for all exceptions that cannot be classified / not mapped

4.2 A. Container / Session Creation and Allocation Failure

errorDetailCausePerson in charge
FAILED_CREATING_CONTAINERThe API call to create a sandbox browser container has failed. This is mainly due to temporary internal management service outages, authentication expiration, or backend exceptions.SOFTCAMP
ERROR_GET_CONTAINER_URLRepresentative error codes for the container URL acquisition stage. Most exceptions that are not identified by specific causes are aggregated under this value.SOFTCAMP
ERROR_GET_CONTAINER_URL_REASSIGNThe existing container is abnormal.Reassign to a new containerFailed while attempting to __PH_0__.SOFTCAMP
MAXIMUM_PODS_REACHEDReached the capacity limit of the isolation browser cluster. New container allocation denied.SOFTCAMP
MAXIMUM_TABS_REACHEDper user (or tenant)Simultaneous Open Tab LimitExceed. Blocked at the new tab creation stage.User

Recommended Actions

  • MAXIMUM_TABS_REACHED: Guide users to close unused tabs
  • MAXIMUM_PODS_REACHED: Capacity expansion consultation needed — Contact SOFTCAMP
  • Other A group code: Contact SOFTCAMP for persistent recurrence

4.3 B. Session Entry / Validation Failure

errorDetailCause
NO_TAB_ID_SESSIONSession Identifier (tabId) does not exist, or there is no mapping in the client session storage.Abnormal Entry. Bookmark / Open direct link, such as when opening a direct browser page in isolation without a parent window.
MISSING_SESSION_DATAThere is a session identifier, but there is no matching session context (user/policy/target URL, etc.). Re-entry after session expiration or server-client state mismatch.
MISSING_CURRENT_URLThe target URL to move to the isolation browser is empty. Missing entry path parameters or failure to pass the URL from the parent window.

Recommended Actions

  1. **[User]**Accessing the admin page/user page through the normal entry path again
  2. When repeated occurrences occur on the normal pathSOFTCAMP Inquiry

4.4 C. Policy Inquiry / Determination

errorDetailCausePerson in charge
POLICY_QUERY_FAILEDPolicy server query API failure (network / 5xx / parsing error). Access to the page is blocked as the blocking/allowing judgment itself is not possible.SOFTCAMP
FAILED_NAVIGATED_PAGEpolicyAllowedDetermined as a failure, but the actual page navigation failed. Internal navigation failure in the isolated browser or redirection loop, etc.Target Site Side / SOFTCAMP

Recommended Actions

  • POLICY_QUERY_FAILEDOccurs simultaneously for all users: Internal service issue → Contact SOFTCAMP immediately
  • FAILED_NAVIGATED_PAGEOccurs only on a specific site: Check the redirection/authentication structure of the site.

4.5 D. Container Connection Status (Runtime)

errorDetailCause
CONTAINER_DISCONNECTEDReal-time connection with the isolation browser container in use has been lost. Server-side container termination, network disconnection, keep-alive failure, etc.
SESSION_TERMINATED_BY_ADMINThe administrator can manage the user session from the central management console.Forced termination. The screen is deactivated without attempting to reconnect.

Recommended Actions

  • SESSION_TERMINATED_BY_ADMIN: Normal Expected Behavior — Result of Administrator Action
  • CONTAINER_DISCONNECTED: If the issue persists after user reconnection, please contact SOFTCAMP.

4.6 E. Health Check Failure

Failure in the state verification step of the isolated browser instance. In the normal path,WARNis recorded and passed at a level, but under certain entry conditions,ERRORIt will be promoted to a page.

errorDetailCause
HEALTH_CHECK_NETWORK_ERRORFailed to reach TCP / TLS level to the isolated browser instance. Possible causes include firewall / web filter / network DLP blocking, DNS failure, client offline, or certificate issues.
HEALTH_CHECK_TIMEOUTThe instance may be alive, but the health check response did not reach 2 seconds. Instance startup delay, node overload, network RTT surge.

Recommended Actions

  1. **[Client Administrator]**Check if the SHIELD Gate domain is not blocked in the internal firewall / web filter / DNS settings.
  2. **[User]**VPN / Retry after restarting the security agent
  3. If it is reproduced by multiple users in the same time zone, it is an infrastructure issue → Contact SOFTCAMP

4.7 F. Browser Environment

errorDetailCause
BROWSER_VERSION_UPDATE_REQUIREDThe version of Chrome that the user is using is below the minimum supported version. Switching to the update required screen due to the lack of the WebView API needed for the isolated browser feature.

Recommended Actions

  • User Notification for Chrome Update (In environments where automatic updates are blocked, the administrator needs to allow updates)

4.8 G. Chrome Network Layer Error

Isolated Browser → This is an entry that records the error codes returned by Chromium as they are in the external target web server section.

The error in this interval isUser PC ↔ SHIELD GatenotIsolation Browser Cluster ↔ Target SiteOccurs in the interval. The inspection prioritizes the egress network on the isolated browser side and the ingress policy on the target site side.

4.8.1 Error Code Mapping

Chrome codeerrorDetailMain Causes
-7ERR_TIMED_OUTTotal request timeout. Slow server / path.
-21ERR_NETWORK_CHANGEDNetwork Switching (Wi-Fi↔LAN, VPN Reconnection).
-100ERR_CONNECTION_CLOSEDConnection terminated while the server was sending or receiving data.
-101ERR_CONNECTION_RESETTransmission of RST from server / intermediate device. Forced termination at L4 device/proxy.
-102ERR_CONNECTION_REFUSEDThe target port is not listening. Service down or port typo.
-103ERR_CONNECTION_ABORTEDAbnormal Connection Termination (Client Perspective)
-104ERR_CONNECTION_FAILEDGeneral connection failure. L4 issue that cannot be classified in detail.
-105ERR_NAME_NOT_RESOLVEDDNS query failed. Domain absent or DNS server issue.
-106ERR_INTERNET_DISCONNECTEDNo client internet connection.
-107ERR_SSL_PROTOCOL_ERRORTLS handshake failed.
-108ERR_ADDRESS_INVALIDInvalid IP/Host notation.
-109ERR_ADDRESS_UNREACHABLEUnable to reach the destination due to routing.
-110ERR_SSL_CLIENT_AUTH_CERT_NEEDEDServer requires client certificate (mTLS).
-111ERR_TUNNEL_CONNECTION_FAILEDHTTP CONNECT proxy tunneling failed.
-112ERR_NO_SSL_VERSIONS_ENABLEDNo available TLS version.
-113ERR_SSL_VERSION_OR_CIPHER_MISMATCHTLS version / cipher suite negotiation failure.
-118ERR_CONNECTION_TIMED_OUTTCP connection establishment timeout. Suspected firewall drop, routing failure.
-130ERR_PROXY_CONNECTION_FAILEDFailed to connect to the configured proxy.
-200SSL_CERTIFICATE_ERRORServer Certificate Validity Error (General).
-202ERR_CERT_AUTHORITY_INVALIDIssuing CA not trusted. Private CA not installed, etc.
-324ERR_EMPTY_RESPONSEThe server terminated the connection without giving any response.

4.8.2 Client Administrator Inspection Checklist

The error below isIsolated Browser Cluster → Target Web ServerbetweenEgress section of the isolated environmentIt occurs in the user PC → SHIELD Gate segment, so please first check the network/policy on the isolated browser cluster side.

① DNS resolution failure (ERR_NAME_NOT_RESOLVED)
  • Check the normal response of the DNS server (internal / external) set in the isolated browser cluster.
  • If the target domain exists only in the internal DNS, check if the isolated browser cluster is also pointing to the same DNS.
  • Check if it is not subject to the domain blocking policy of the customer environment (DNS sinkhole, category blocking).
  • Compare test with other sites in an isolated browser to see if only a specific domain is failing or if all domains are failing.
② Network Timeout / UnreachableERR_TIMED_OUT, ERR_CONNECTION_TIMED_OUT, ERR_CONNECTION_FAILED, ERR_ADDRESS_UNREACHABLE)

Isolated Browser Side (Outbound)

  • In the network where the isolated browser cluster is located, to the target server IP/portoutbound firewall allowConfirmation of whether
  • Check the status of NAT GW / Proxy / SD-WAN routing in the cluster egress section.
  • Check CPU / Memory / Network RTT metrics of the isolated browser node (potential processing delays due to overload)

Target Site Side (Inbound)

  • target siteinbound firewall / security groupCheck if the egress IP of the isolated browser cluster is not blocked.
  • If the target site is operating an IP whitelist policy, check if the egress IP of the isolated browser cluster is registered.
  • GeoIP / Country BlockingCheck if the policy is not restricted by the isolated browser cluster region (frequent when using overseas regions)
  • Cloud WAF (Cloudflare / Akamai, etc.)IP Reputation / Bot BlockingCheck if the egress IP is not set in the policy (multiple user traffic may gather under a single IP, leading to a decline in reputation)
  • Check if the target server has reached the simultaneous connection count / Rate-Limit threshold.

Comparison Test

  • The same site on the user's PCDirect AccessComparing whether it works → If direct access also fails, it is an issue with the target server / internet line.
  • **Other Isolated Browser Nodes (Different Egress IP)**Compare access from the same site → Identify whether a specific IP is blocked
③ Connection Refusal / Forced Termination (ERR_CONNECTION_CLOSED, ERR_CONNECTION_RESET, ERR_CONNECTION_REFUSED, ERR_CONNECTION_ABORTED)
  • Check if the target web server / service is operating normally (ERR_CONNECTION_REFUSEDis usually service down)
  • L4 / WAF / IPS devices on the path isolate browser egress traffic.**Automatic Blocking (RST Transmission)**Check if you are not doing it.
  • Due to a large number of requests in a short period from the target siteRate-Limit BlockingConfirmation of whether it appears as a single origin for multiple users
  • Check for Client User-Agent / TLS fingerprint-based Blocking (Bot Detection) Policy
④ Internet Connection / Network SwitchERR_INTERNET_DISCONNECTED, ERR_NETWORK_CHANGED)
  • Check the status of the internet line / NAT GW / egress IP of the isolated browser cluster.
  • Check if the same error occurred for other users in the same time zone (if it's a widespread issue, it's an infrastructure issue)
  • ERR_NETWORK_CHANGEDCan occur during network switching on the client PC side → Simultaneous check of user line (VPN reconnection, Wi-Fi ↔ LAN switching)
⑤ TLS / SSL negotiation failure (ERR_SSL_PROTOCOL_ERROR, ERR_NO_SSL_VERSIONS_ENABLED, ERR_SSL_VERSION_OR_CIPHER_MISMATCH)
  • Requirements of the target siteMinimum TLS VersionCheck if (e.g., TLS 1.2 / 1.3) is compatible with the isolation browser policy.
  • Review of permission based on security policy when accessing the old version site (only supports TLS 1.0 / 1.1)
  • Check that the SSL inspection device on the path does not cause negotiation failures.
⑥ Server Certificate Error (SSL_CERTIFICATE_ERROR, ERR_CERT_AUTHORITY_INVALID)
  • Certificate of the target siteExpiration / Domain Mismatch / Self-SignedConfirmation of whether
  • If it is a site issued by an internal private CARegistering a Private CA Certificate in SHIELD GateStatus Check
⑦ Client Certificate Requirement (ERR_SSL_CLIENT_AUTH_CERT_NEEDED)
  • Target site is**mTLS (Mutual TLS)**Check if it requires
  • Review of the configuration for client certificate injection in an isolated browser environment (node mount / policy deployment)
  • For mTLS sites, the use of isolated browsers may be policy-wise inappropriate → Review exception handling (allow direct access).
⑧ Proxy / Tunneling Failure (ERR_TUNNEL_CONNECTION_FAILED, ERR_PROXY_CONNECTION_FAILED)
  • Set in the isolated browser cluster**outbound proxy (PAC / Explicit Proxy)**Check if it is functioning normally
  • Check the expiration status of proxy authentication information (account / token)
  • Check if the target site is not blocking HTTPS CONNECT tunneling.
⑨ Incorrect Address Notation (ERR_ADDRESS_INVALID)
  • URL format error check for user input (port number, special characters)
  • Damage to the encoding/decoding process of the entry path parameters in the isolation browser
10 Empty Response (ERR_EMPTY_RESPONSE)
  • The target server disconnects immediately after receiving the request without a response → Check for network or target site issues.
Common Checks
  • The same erroronly on specific sitesNarrowed down to site (or site policy) issues
  • Same errorSimultaneous on multiple sites→ Isolated Browser Infrastructure / Egress Line Issues
  • Same errorOnly for specific usersCheck the user's policies / groups / routing policies.
  • Check the isolation browser node status at the time of occurrence (health check, container restart events) together.

4.9 H. Default Value (Fallback)

errorDetailCause
UNKNOWN_SYSTEM_ERRORDefault value for exceptions that do not fall under any of the categories A~G. All cases where the cause has not been identified.

Additional cases that effectively result in this value:

  1. When the health check returns an HTTP / Unclassified error
  2. If a code that is not mapped to a Chromium error code is received
  3. Basic Branching of Session Error Handling Logic

Recommended Actions

  • If the code is aggregated frequently, it is a signal that classification expansion is needed, so collect the occurrence time, user, and target URL and send it to SOFTCAMP.

5. Appendix

5.1 Events that do not trigger ERROR level

The following events are designed toINFOIt is recorded only at the levelERRORwill not remain.

NAVIGATE_TO_ADMIN_PAGE          관리자 페이지로 이동
POST_INQUIRY_WORK_ITEM_ACCESS_URL 브라우저 접속
RBI_URL_CHANGED 브라우저 접속 후 이동
RBI_CHECK_INPUT_TEXT 사용자 입력 민감정보 검사
RBI_CLIPBOARD_ACCESS_RB2PC 격리 브라우저 → 로컬 PC 복사
RBI_CLIPBOARD_ACCESS_PC2RB 로컬 PC → 격리 브라우저 붙여넣기
RBI_SESSION_TIMEOUT 격리 브라우저 세션 타임아웃
RBI_KEYBOARD_INPUT 키보드 입력 차단
RBI_FILE_VIEWER_REQUEST SHIELD Viewer 요청

5.2 Information to Provide When Contacting SOFTCAMP

To reduce the time required for problem resolution, please provide the following items when contacting SOFTCAMP.

#itemNote
1Occurrence Time (YYYY-MM-DD HH:MM:SS, including timezone)Accurate time range required
2Company Identifier / Tenant Name
3Impacted User ID (or Email)Single User / Multiple 여부도 함께
4Event CodeExample:RBI_USAGE_ERROR
5errorDetailvalueRBI_USAGE_ERRORrequired in case
6Target URL (if applicable)Site address accessed with an isolated browser
7Reproducibility / Reproduction StepsStep-by-step record when reproduced
8User Browser / OS VersionBrowser Environment Issues (F Group) Classification
9Occurrence for other users in the same time zoneInfrastructure Issue Assessment Materials
10Whether to change the previous administrator settingsPolicy / Storage / Firewall Change History