Skip to main content

User Log Error Response Guide

SHIELD Gate Integrated Log 중User Logevent isWARNorERRORThis is a customer operation guide that summarizes the meaning and response procedures when recorded as a level.


Table of Contents


1. Overview

1.1 Log Level Classification

levelmeaning
INFONormal operation or general event log. No separate action required.
WARNThere is no direct impact on service usage, but it is a situation worth checking.
ERRORFunction execution failed. Cause identification and response needed.

1.2 Scope of this Guide

  • This guide covers user logs.ERROR Events that can occur at the levelIt explains detailed responses limited to __PH_0__.
  • alwaysINFOThe list of events recorded in Roman5.1 AppendixReference.

2. User Log Event Summary

The table below shows all events of the SHIELD Gate user log andERRORThis is a summary of the possibility of level occurrence.

ClassificationEvent CodeEvent NameERROR occurredResponse Section
AuthenticationCALLBACK_SECURITY365_CODELogin⚠️ (※1)
POST_SIGN_OUTLogout3.1
POST_RELAY_TOKENService Migration3.1
NAVIGATE_TO_ADMIN_PAGEMove to Admin Page
Isolated BrowserPOST_INQUIRY_WORK_ITEM_ACCESS_URLBrowser Access
RBI_URL_CHANGEDAfter accessing the browser, move
RBI_CHECK_INPUT_TEXTUser Input Sensitive Information Check
RBI_CLIPBOARD_ACCESS_RB2PCCopy from the isolated browser
RBI_CLIPBOARD_ACCESS_PC2RBPaste in the isolated browser
RBI_USAGE_ERRORIsolation Browser Error3.6 / 4
RBI_SESSION_TIMEOUTIsolated Browser Session Timeout
RBI_KEYBOARD_INPUTKeyboard Input Blocking
PersonalizationPOST_FAVORITE_ITEMRegister as a favorite3.2
DELETE_FAVORITE_ITEMDelete Bookmark3.2
fileRBI_FILE_UPLOADFile Upload3.4
RBI_FILE_DOWNLOADFile Download3.5
RBI_FILE_VIEWER_REQUESTSHIELD Viewer Request
Top BarGET_EXTERNAL_INTERFACE_ACCESS_URLAccessing External Links in the Top Bar3.3

※1 CALLBACK_SECURITY365_CODE Guide
Login event isOnly if the login is successfulIt will be recorded. The login failure itself cannot confirm user information, so a separateERRORIt will not be logged. If login failures occur repeatedly, please contact SOFTCAMP.


3. ERROR Occurrence Event Response Guide

"Responsible" notation guidelines in the table
사용자— Re-login, retry, check environment, etc. within the scope that can be resolved by oneself
고객사 관리자— Policy·Authority·Firewall·DNS·Certificate, etc. Scope that can be resolved through inspection·configuration in the customer's operational area
대상 사이트 측— Scope of Responsibility for External Websites Accessed via Isolated Browser
소프트캠프— Scope that requires inquiry as it is judged to be an internal service issue


3.1 POST_SIGN_OUT / POST_RELAY_TOKEN (Log Out / Service Transfer)

🔧 Responsibility Division Summary — 소프트캠프 영역
This event'sERRORisOccurs solely due to internal service issues.does. There are no cases triggered by customer settings, and without any action items from the customer sideContact SOFTCAMP directlyTarget.

itemContent
eventPOST_SIGN_OUT— SHIELD Gate LogoutPOST_RELAY_TOKEN— Move to the SHIELD Gate admin page from the Security365 management center
General CharacteristicsOccurs only due to internal service issues. There are no cases triggered by user/client settings.

3.1.1 Possible Causes

#Causeperson in charge
1Temporary outage of internal data storageSOFTCAMP
2Authentication Service Integration ErrorSOFTCAMP
  1. **[User]**Retry the same task after re-logging in
  2. **[Client Company Administrator]**Check if the same error occurred for other users in the same time zone (determine if it's an infrastructure issue)
  3. If the same symptoms persist,SOFTCAMP Inquiry

3.2 POST_FAVORITE_ITEM / DELETE_FAVORITE_ITEM (Register / Delete Favorite Item)

🔧 Responsibility Division Summary — 소프트캠프 영역
This event'sERRORis**Occurs only due to issues with the internal data storage of the service.**It is. It is a subject of inquiry to SOFTCAMP without any action items from the client side.

itemContent
eventPOST_FAVORITE_ITEM— Register as a favoriteDELETE_FAVORITE_ITEM— Delete Bookmark
General CharacteristicsMainly occurs due to issues with the internal data storage of the service.

3.2.1 Possible Causes

#Causeperson in charge
1Internal data storage connection errorSOFTCAMP
2Other Service Internal ExceptionSOFTCAMP
  1. **[User]**Retry after a moment
  2. When a repetition occursSOFTCAMP Inquiry

🔧 Responsibility Division Summary — 고객사 관리자 1차 점검
1st laneExternal Link Settings for Customer Management Admin's Top BarCheck it. If it occurs despite the settings being normal, contact SOFTCAMP.

itemContent
eventThe action of the user clicking the custom button set by the administrator on the top bar of the user page to access an external URL.

3.3.1 Possible Causes

#Causeperson in chargeNote
1Calling without external links set in the top barCustomer Company AdministratorSince it is pre-blocked in the admin page UI, it does not normally occur.
2Internal data storage retrieval errorSOFTCAMP
  1. **[Client Company Administrator]**Admin Page > Check if the custom button is properly registered in the Top Bar Settings
  2. If it occurs repeatedly despite normal settingsSOFTCAMP Inquiry

3.4 RBI_FILE_UPLOAD (File Upload)

🔧 Responsibility Division Summary — 외부 사이트 / 사용자 환경 1차 점검
Most cases areIssues on the target site for uploadorNetwork environment issues of user PCThe number 1 priority cause. Only contact SOFTCAMP after verifying permissions and authentication related to SHIELD Drive failures.

File upload process occurring through the isolation browserERRORThe log. The cause varies depending on the upload path, so it is explained in four cases below.

3.4.1 [Case A] Uploading a Site Accessed from Local PC to Isolated Browser

Occurs when a user uploads a local file attached to a site opened in an isolated browser.

#Cause of Occurrenceperson in chargeHow to Check
1Abnormal response from the upload target site server (temporary site outage, authentication expiration, violation of file size/type policy, etc.)Target site sideuser**Directly access the target site and upload the same file.**Compare if the same symptoms occur in poetry
2Network Disconnection / CORS / DNS Failure Causing Request FailureUser / Client AdministratorCheck user PC network status, VPN connection, firewall policy
3The target site responds in a format other than JSON (HTML error page, etc.)Target site sideThere is a high possibility of issues on the target site.

Recommended Actions

  1. Directly access the target site from the user's PC to compare if the same file upload is normal.
  2. If direct access also fails → Determine it as an issue on the target site's side.
  3. Direct access is normal, but if it only fails in the isolated browser →SOFTCAMP Inquiry

3.4.2 [Case B] SHIELD Drive File → Isolated Browser Site (Failed to Import SHIELD Drive File)

When the user selects a file in the SHIELD Drive dialog to upload to the isolated browser site,Steps to Retrieve Original Files from SHIELD DriveFailed at.

#Cause of Occurrenceperson in chargeAction
1SHIELD Drive authentication has expired or the token is invalid.UserLogging out and logging back in
2The user does not have access permission for the file.Customer Company AdministratorGranting File/Folder Access Permissions
3The file has already been deleted or moved from the SHIELD Drive.UserCheck file existence in SHIELD Drive and retry
4SHIELD Drive service internal errorSOFTCAMPSOFTCAMP Inquiry

3.4.3 [Case C] SHIELD Drive File → Isolated Browser Site (Target Site Upload Step Failed)

It has the same flow as Case B, butAfter successfully retrieving files from SHIELD DriveFailed at the stage of uploading to the site accessed with the isolation browser.

#Cause of Occurrenceperson in chargeHow to Check
1Abnormal response from the target site serverTarget site sideCompare whether the same symptoms occur by having the user directly access the target site.
2Network disconnection or CORS errorCustomer Company AdministratorNetwork / Firewall Policy Check

3.4.4 [Case D] Multiple File Upload (Asynchronous Failure)

When uploading multiple local files or SHIELD Drive files at once, some files fail during the upload response handling stage.

  • Cause·Action Criteria isCase Aand the same
  • Check whether only specific files are failing repeatedly or if everything is failing in bulk.

3.5 RBI_FILE_DOWNLOAD (File Download)

🔧 Responsibility Division Summary — 혼합 (SHIELD Drive 저장은 관리자 영역 비중 큼)
Download policy trigger failure (Case A) and SHIELD Drive upload network failure (Case B) areSOFTCAMP Processing Area. SHIELD Drive save response error (case C) is mostlyCustomer Administrator's Storage / Permissions / Extension Policy SettingsArea.

The process of file download occurring through the isolated browserERRORThe log. It is categorized into the following 3 cases based on the download save location (local PC / SHIELD Drive) and the point of failure.

3.5.1 [Case A] Download Policy Trigger Failure

When the user clicks the file download button on the isolated browser site, the SHIELD Gate backend'sDownload Policy Processing StepsFailed at.

#Cause of Occurrenceperson in charge
1SHIELD Gate server internal error (temporary file creation failure, data storage error, etc.)SOFTCAMP
2Error in the step of receiving files from the isolated browser containerSOFTCAMP
3Unclassified ExceptionSOFTCAMP

Recommended Actions

  1. **[User]**Attempt to re-download the same file
  2. If other files download normally but a specific file keeps failing, please provide the information about that file along with it.SOFTCAMP Inquiry

3.5.2 [Case B] Download to SHIELD Drive Repository — Network / HTTP Exception

In an environment using SHIELD Drive, the flow of storing downloaded files from the isolated browser site to SHIELD DriveSHIELD Drive upload API call itself failedin case.

#Cause of Occurrenceperson in charge
1SHIELD Gate server / Isolated browser container file processing errorSOFTCAMP
2Server down, timeout, and other temporary network exceptionsSOFTCAMP

Recommended Actions

  1. **[User]**Retry after a moment
  2. If multiple users experience the same symptoms at the same time → possibility of an infrastructure issue
  3. When a repetition occursSOFTCAMP Inquiry

3.5.3 [Case C] Download to SHIELD Drive Storage — Response Business Code Failure

Same flow as Case B, but**The API call was successful, but the response from SHIELD Drive is abnormal.**in case.

#Cause of Occurrenceperson in chargeAction
1SHIELD Drive storage has not been created.Customer Company AdministratorCreating SHIELD Drive Storage
2SHIELD Gate does not have access permission to the specified storage.Customer Company AdministratorStorage Access Permission Settings
3The file name violates the SHIELD Drive naming convention.UserRetry after renaming the file
4User storage capacity exceededCustomer Company AdministratorFile organization or capacity expansion
5SHIELD Drive does not support/block the corresponding extension.Customer Company AdministratorCheck SHIELD Drive extension policy
6Upload failure of file storage integration serviceSOFTCAMPSOFTCAMP Inquiry
7Failed to process internal upload for SHIELD DriveSOFTCAMPSOFTCAMP Inquiry
8There is no company or user information in SHIELD Drive.Customer Company AdministratorCheck User Provisioning Status
9Failed to retrieve storage informationSOFTCAMPSOFTCAMP Inquiry
10SHIELD Drive storage disabled stateCustomer Company AdministratorStorage Activation
11No permission to upload storage to SHIELD DriveCustomer Company AdministratorGranting Upload Permissions
12Attempt to download an empty file (0 byte)UserCheck the original file
13Other Unclassified ExceptionsSOFTCAMPSOFTCAMP Inquiry

Recommended Actions

  1. Administrator settings series (1·2·5·8·10·11) should first check and supplement the settings.
  2. If it occurs after normal settingsSOFTCAMP Inquiry

3.6 RBI_USAGE_ERROR (Isolation Browser Error)

This event encompasses all system errors that occurred while using the isolation browser.errorDetailThe specific causes are distinguished by value, and the detailed classification and response areChapter 4 RBI_USAGE_ERROR Detailed Code GuidePlease refer to __PH_0__.


4. RBI_USAGE_ERROR Detailed Code (errorDetail) Response Guide

RBI_USAGE_ERRORRecorded with eventserrorDetailIdentifying specific causes by field. The classification system consists of the following 8 groups.

groupClassificationMain CharacteristicsPrimary Responsibility Area
AContainer / Session creation and allocation failureRBI Resource Allocation StageUser (Tab Limit) orSOFTCAMP
BSession Entry / Validation FailureUser session status abnormalUser Re-entry → When RepeatingSOFTCAMP
CPolicy Inquiry / Judgment FailurePolicy Service IntegrationSOFTCAMP(FAILED_NAVIGATED_PAGE includes the target site)
DContainer Connection StatusRuntime DisconnectionAdministrator action results orSOFTCAMP
EHealth check failedIsolated Browser Instance Startup StatusCustomer Administrator (Firewall/DNS)+ SOFTCAMP
FBrowser EnvironmentUser PC's Chrome versionUser / Client Administrator (Update Policy)
GChrome Network Layer ErrorIsolation Browser → External Site SectionClient Administrator (Network·Security Inspection) / Target Site Side
HDefault (Fallback)Classification Not Possible ExceptionSOFTCAMP

💡 Operational Tips
The G group is the group that shows the largest proportion as the number of users increases, and**Most customer network and security equipment inspections can resolve the issue in the first instance.**does. Checklist(4.8.2If the issues are not resolved even after performing the above steps, you can quickly get a response by forwarding them to SOFTCAMP.

4.1 AllerrorDetailIndex

grouperrorDetailOne-line summary
AFAILED_CREATING_CONTAINERFailed to call the API to create a quarantine browser container
AERROR_GET_CONTAINER_URLFailed to obtain container URL (Representative code for exceptions other than classification)
AERROR_GET_CONTAINER_URL_REASSIGNContainer URL reassignment path failed
AMAXIMUM_PODS_REACHEDIsolation browser cluster capacity exceeded
AMAXIMUM_TABS_REACHEDUser/Tenant Concurrent Open Tab Limit Exceeded
BNO_TAB_ID_SESSIONNo session identifier or mapping (abnormal entry)
BMISSING_SESSION_DATANo session context (expired / mismatch)
BMISSING_CURRENT_URLThe URL for the isolation target is empty.
CPOLICY_QUERY_FAILEDPolicy server query failed
CFAILED_NAVIGATED_PAGEAllowed URL but actual page navigation failed
DCONTAINER_DISCONNECTEDIsolation Browser Container Real-time Disconnection
DSESSION_TERMINATED_BY_ADMINAdmin Force Logout
EHEALTH_CHECK_NETWORK_ERRORFailed to reach isolated browser instance (TCP/TLS)
EHEALTH_CHECK_TIMEOUTIsolation Browser Instance Health Check Response Delay
FBROWSER_VERSION_UPDATE_REQUIREDChrome minimum version not met
GERR_TIMED_OUTTotal Request Timeout
GERR_NETWORK_CHANGEDNetwork Switching (Wi-Fi ↔ LAN, VPN Reconnection)
GERR_CONNECTION_CLOSEDConnection terminated during transmission
GERR_CONNECTION_RESETServer/Path Device RST Transmission
GERR_CONNECTION_REFUSEDTarget port not listening
GERR_CONNECTION_ABORTEDAbnormal termination of connection (Client perspective)
GERR_CONNECTION_FAILEDGeneral connection failure
GERR_NAME_NOT_RESOLVEDDNS query failed
GERR_INTERNET_DISCONNECTEDClient no internet connection
GERR_SSL_PROTOCOL_ERRORTLS handshake failure
GERR_ADDRESS_INVALIDIncorrect IP / Host Notation
GERR_ADDRESS_UNREACHABLERouting unreachable
GERR_SSL_CLIENT_AUTH_CERT_NEEDEDmTLS Client Certificate Requirement
GERR_TUNNEL_CONNECTION_FAILEDHTTP CONNECT proxy tunneling failure
GERR_NO_SSL_VERSIONS_ENABLEDNo available TLS version
GERR_SSL_VERSION_OR_CIPHER_MISMATCHTLS version / cipher suite negotiation failure
GERR_CONNECTION_TIMED_OUTTCP connection establishment timeout
GERR_PROXY_CONNECTION_FAILEDFailed to connect to the configured proxy
GSSL_CERTIFICATE_ERRORServer Certificate Validity Error
GERR_CERT_AUTHORITY_INVALIDIssuing CA not trusted
GERR_EMPTY_RESPONSEConnection closed without response from the server
HUNKNOWN_SYSTEM_ERRORUnclassified / Default value for all unmapped exceptions

4.2 A. Container / Session Creation and Allocation Failure

errorDetailCauseperson in charge
FAILED_CREATING_CONTAINERThe API call to create a isolation browser container itself has failed. Mainly due to temporary failures in internal management services, authentication expiration, backend exceptions.SOFTCAMP
ERROR_GET_CONTAINER_URLRepresentative error codes for the container URL acquisition stage. Most exceptions that are not identified by specific causes are aggregated with this value.SOFTCAMP
ERROR_GET_CONTAINER_URL_REASSIGNThe existing container is abnormal, soReassign to a new containerFailed while attempting to __PH_0__.SOFTCAMP
MAXIMUM_PODS_REACHEDReached the capacity limit of the isolation browser cluster. New container allocation denied.SOFTCAMP
MAXIMUM_TABS_REACHEDper user (or tenant)Simultaneous Open Tab LimitExceeded. Blocked at the new tab creation stage.User

Recommended Actions

  • MAXIMUM_TABS_REACHED: Guide users to close unused tabs
  • MAXIMUM_PODS_REACHED: Capacity expansion consultation needed — SOFTCAMP inquiry
  • Other A group code: Contact SOFTCAMP for persistent recurrence.

4.3 B. Session Entry / Validation Failure

errorDetailCause
NO_TAB_ID_SESSIONSession Identifier(tabId) does not exist, or there is no mapping in the client session storageAbnormal Entry. Bookmark / Open direct link, such as when opening a standalone browser page without a parent window.
MISSING_SESSION_DATASession identifier exists, but there is no matching session context (user/policy/target URL, etc.). Re-entry after session expiration or server-client state mismatch.
MISSING_CURRENT_URLThe target URL to move to in the isolation browser is empty. Missing entry path parameter or failure to pass the URL from the parent window.

Recommended Actions

  1. **[User]**Admin Page/User Page Normal Access Path Reconnect
  2. When repeated occurrences happen on the normal pathSOFTCAMP Inquiry

4.4 C. Policy Inquiry / Determination

errorDetailCauseperson in charge
POLICY_QUERY_FAILEDPolicy server retrieval API failure (network / 5xx / parsing error). Access to the page is blocked as it is in a state where blocking/allowing judgment is not possible.SOFTCAMP
FAILED_NAVIGATED_PAGEpolicy tableAllowedDetermined as but actual page navigation failed. Isolation browser internal navigation failure or redirection loop, etc.Target Site Side / SOFTCAMP

Recommended Actions

  • POLICY_QUERY_FAILEDOccurs simultaneously for all users: Internal service issue → Contact SOFTCAMP immediately
  • FAILED_NAVIGATED_PAGEOccurs only on a specific site: Check the redirection/authentication structure of that site.

4.5 D. Container Connection Status (Runtime)

errorDetailCause
CONTAINER_DISCONNECTEDReal-time connection with the isolation browser container in use has been disconnected. Server-side container termination, network disconnection, keep-alive failure, etc.
SESSION_TERMINATED_BY_ADMINThe administrator can manage the user session from the central management console.Forced termination. Reconnection is not attempted and the screen is disabled.

Recommended Actions

  • SESSION_TERMINATED_BY_ADMIN: Normal Expected Operation — Result of Administrator Action
  • CONTAINER_DISCONNECTED: If the issue persists after user reconnection, contact SOFTCAMP.

4.6 E. Health Check Failure

Failure at the state verification step of the isolated browser instance. In the normal path,WARNIt is recorded and passed at a level, but under certain entry conditions,ERRORIt will be promoted to a page.

errorDetailCause
HEALTH_CHECK_NETWORK_ERRORFailed to reach TCP / TLS level to the isolated browser instance. Possible block by firewall / web filter / network DLP, DNS failure, client offline, certificate issue.
HEALTH_CHECK_TIMEOUTThe instance may be alive, but the health check response did not reach 2 seconds. Instance startup delay, node overload, network RTT surge.

Recommended Actions

  1. **[Client Company Administrator]**Check if the SHIELD Gate domain is not blocked in the internal firewall / web filter / DNS settings.
  2. **[User]**VPN / Security Agent Restart and Retry
  3. If reproduced by multiple users in the same time zone, it is an infrastructure issue → Contact SOFTCAMP

4.7 F. Browser Environment

errorDetailCause
BROWSER_VERSION_UPDATE_REQUIREDThe version of Chrome the user is using is below the minimum supported version. Switching to the update required screen due to the lack of WebView API needed for the isolated browser feature.

Recommended Actions

  • User Chrome Update Notification (In environments where automatic updates are blocked, the administrator needs to allow updates)

4.8 G. Chrome Network Layer Error

Isolated Browser → This is an entry that records the error codes returned by Chromium as they are in the external target web server section.

The error in this interval isUser PC ↔ SHIELD GatenotIsolation Browser Cluster ↔ Target SiteOccurs in the interval. The inspection prioritizes the egress network on the isolated browser side and the ingress policy on the target site side.

4.8.1 Error Code Mapping

Chrome codeerrorDetailMain Causes
-7ERR_TIMED_OUTTotal request timeout. Slow server / path.
-21ERR_NETWORK_CHANGEDNetwork Switching (Wi-Fi↔LAN, VPN Reconnection).
-100ERR_CONNECTION_CLOSEDConnection terminated during data transmission between the server.
-101ERR_CONNECTION_RESETServer / Intermediate device RST transmission. Forced termination at L4 device/proxy.
-102ERR_CONNECTION_REFUSEDThe target port is not listening. Service down or port typo.
-103ERR_CONNECTION_ABORTEDAbnormal connection termination (client perspective).
-104ERR_CONNECTION_FAILEDGeneral connection failure. L4 issue that cannot be classified in detail.
-105ERR_NAME_NOT_RESOLVEDDNS query failed. Domain absent or DNS server issue.
-106ERR_INTERNET_DISCONNECTEDNo internet connection for the client.
-107ERR_SSL_PROTOCOL_ERRORTLS handshake failed.
-108ERR_ADDRESS_INVALIDInvalid IP/host notation.
-109ERR_ADDRESS_UNREACHABLEUnable to reach the destination due to routing.
-110ERR_SSL_CLIENT_AUTH_CERT_NEEDEDServer requires client certificate (mTLS).
-111ERR_TUNNEL_CONNECTION_FAILEDHTTP CONNECT proxy tunneling failed.
-112ERR_NO_SSL_VERSIONS_ENABLEDNo available TLS version.
-113ERR_SSL_VERSION_OR_CIPHER_MISMATCHTLS version / cipher suite negotiation failure.
-118ERR_CONNECTION_TIMED_OUTTCP connection establishment timeout. Suspected firewall drop, routing failure.
-130ERR_PROXY_CONNECTION_FAILEDFailed to connect to the configured proxy.
-200SSL_CERTIFICATE_ERRORServer Certificate Validity Error (Comprehensive).
-202ERR_CERT_AUTHORITY_INVALIDIssuance CA not trusted. Private CA not installed, etc.
-324ERR_EMPTY_RESPONSEThe server terminated the connection without giving any response.

4.8.2 Client Administrator Inspection Checklist

The error below isIsolated Browser Cluster → Target Web ServerbetweenEgress section of the isolated environmentOccurs in. Please first check the network/policy on the isolated browser cluster side, not the user PC → SHIELD Gate segment.

① DNS resolution failure (ERR_NAME_NOT_RESOLVED)
  • Check the response status of the DNS server (internal / external) set in the isolated browser cluster.
  • If the target domain exists only in the internal DNS, check if the isolated browser cluster is also pointing to the same DNS.
  • Check if it is not subject to the domain blocking policy of the client environment (DNS sinkhole, category blocking).
  • Compare test with other sites in isolated browser to see if only a specific domain is failing or if all domains are failing.
② Network Timeout / Unreachable (ERR_TIMED_OUT, ERR_CONNECTION_TIMED_OUT, ERR_CONNECTION_FAILED, ERR_ADDRESS_UNREACHABLE)

Isolation Browser Side (Outbound)

  • Check if outbound firewall is allowed to the target server IP/port from the network where the isolated browser cluster is located.
  • Check the routing status of NAT GW / Proxy / SD-WAN in the cluster egress section.
  • Check CPU / Memory / Network RTT metrics of the Isolated Browser Node (Potential processing delays due to overload)

Target Site Side (Inbound)

  • Check if the egress IP of the isolated browser cluster is not blocked in the inbound firewall / security group of the target site.
  • If the target site is operating an IP whitelist policy, check if the egress IP of the isolated browser cluster is registered.
  • Check if the isolated browser cluster region is not subject to GeoIP / country blocking policy (frequent when using overseas regions)
  • Check if the egress IP is not listed in the IP reputation / bot blocking policies of Cloud WAF (Cloudflare / Akamai, etc.) (Multiple user traffic may gather on a single IP, leading to a drop in reputation)
  • Check if the number of simultaneous connections to the target server / Rate-Limit threshold has been reached

Comparison Test

  • Compare whether the same site can be accessed directly from the user's PC → If direct access also fails, it is an issue with the target server / internet line.
  • Comparison of accessing the same site from different isolated browser nodes (different egress IPs) → Identification of specific IP blocking 여부 식별
③ Connection Refusal / Forced Termination (ERR_CONNECTION_CLOSED, ERR_CONNECTION_RESET, ERR_CONNECTION_REFUSED, ERR_CONNECTION_ABORTED)
  • Check if the target web server / service itself is running normally (ERR_CONNECTION_REFUSED usually means the service is down)
  • Check if the L4 / WAF / IPS devices on the path are not automatically blocking the isolated browser egress traffic (sending RST).
  • Check for Rate-Limit blocking due to a large number of requests in a short time from the target site (multiple users → appears as a single source)
  • Check the blocking (bot detection) policy based on Client User-Agent / TLS fingerprint
④ Internet Connection / Network Switch (ERR_INTERNET_DISCONNECTED, ERR_NETWORK_CHANGED)
  • Check the internet line / NAT GW / egress IP status of the isolation browser cluster
  • Check if the same error occurred for other users in the same time zone (if the impact is widespread, it is an infrastructure issue)
  • ERR_NETWORK_CHANGED can also occur due to network switching on the client PC side → Simultaneous check of user connection (VPN reconnection, Wi-Fi ↔ LAN switching)
⑤ TLS / SSL negotiation failure (ERR_SSL_PROTOCOL_ERROR, ERR_NO_SSL_VERSIONS_ENABLED, ERR_SSL_VERSION_OR_CIPHER_MISMATCH)
  • Check if the minimum TLS version required by the target site (e.g., TLS 1.2 / 1.3) is compatible with the isolation browser policy.
  • Review of Allowance Based on Security Policy When Accessing Legacy Version Site (Only Supports TLS 1.0 / 1.1)
  • Check that the SSL Inspection device on the path does not cause negotiation failures.
⑥ Server Certificate Error (SSL_CERTIFICATE_ERROR, ERR_CERT_AUTHORITY_INVALID)
  • Expiration of the target site's certificate / Domain mismatch / Check for self-signed status
  • If it is a site issued by an internal private CA, check the registration status of the private CA certificate in SHIELD Gate.
⑦ Client Certificate Requirement (ERR_SSL_CLIENT_AUTH_CERT_NEEDED)
  • Check if the target site requires mTLS (mutual TLS).
  • Review of the configuration for client certificate injection in an isolated browser environment (node mount / policy deployment)
  • For mTLS sites, the use of isolated browsers may be policy-wise inappropriate → Review exception handling (allow direct access).
⑧ Proxy / Tunneling Failure (ERR_TUNNEL_CONNECTION_FAILED, ERR_PROXY_CONNECTION_FAILED)
  • Check the normal operation of the outbound proxy (PAC / Explicit Proxy) set in the isolation browser cluster.
  • Check if the proxy authentication information (account / token) has expired
  • Check if the target site is not blocking HTTPS CONNECT tunneling.
⑨ Incorrect Address Notation (ERR_ADDRESS_INVALID)
  • User input URL format error (port number, special characters)
  • Isolation Browser Entry Path Parameter Encoding / Decoding Process Integrity
⑩ Empty response (ERR_EMPTY_RESPONSE)
  • The target server disconnects the connection immediately after receiving the request without a response → Check for network or target site issues.
Common Check
  • The same error occurs only on specific sites → Narrowed down to site (or site policy) issues.
  • Same error occurring simultaneously across multiple sites → Isolated browser infrastructure / egress line issue
  • The same error occurs only for a specific user → Check the user's policies / groups / routing policies
  • Check the isolation browser node status at the time of occurrence (health check, container restart event) together.

4.9 H. Default (Fallback)

errorDetailCause
UNKNOWN_SYSTEM_ERRORDefault value for exceptions that do not fall under any of the categories A~G. All cases where the cause has not been identified.

Additional cases that effectively result in this value:

  1. Health check returned HTTP / Unclassifiable error
  2. If a code that is not mapped to the Chromium error code is received
  3. Basic Branching of Session Error Handling Logic

Recommended Actions

  • If the code is aggregated frequently, it is a signal that classification expansion is needed, so collect the occurrence time, user, and target URL and send it to SOFTCAMP.

5. Appendix

5.1 Events that do not generate ERROR level

The following events are designed toINFOIt is recorded only as a levelERRORwill not remain.

NAVIGATE_TO_ADMIN_PAGE          Navigate to Admin Page  
POST_INQUIRY_WORK_ITEM_ACCESS_URL Browser Access
RBI_URL_CHANGED Moved after Browser Access
RBI_CHECK_INPUT_TEXT User Input Sensitive Information Check
RBI_CLIPBOARD_ACCESS_RB2PC Isolated Browser → Local PC Copy
RBI_CLIPBOARD_ACCESS_PC2RB Local PC → Isolated Browser Paste
RBI_SESSION_TIMEOUT Isolated Browser Session Timeout
RBI_KEYBOARD_INPUT Keyboard Input Block
RBI_FILE_VIEWER_REQUEST SHIELD Viewer Request

5.2 Information to Provide When Contacting SOFTCAMP

To reduce the time required for problem resolution, please provide the following items when contacting SOFTCAMP.

#itemNote
1Occurrence Time (YYYY-MM-DD HH:MM:SS, including timezone)Required accurate time range
2Company Identifier / Tenant Name
3Impacted user ID (or email)Single User / Multiple 여부도 함께
4Event CodeExample:RBI_USAGE_ERROR
5errorDetailvalueRBI_USAGE_ERRORrequired in case
6Target URL (if applicable)Site address accessed with the isolation browser
7Reproducibility / Reproduction StepsStep-by-step record when reproduced
8User Browser / OS VersionBrowser Environment Issues (F Group) Classification
9Occurrence for other users in the same time zoneInfrastructure Issue Assessment Data
10Previous Administrator Settings Change StatusPolicy / Storage / Firewall Change History