> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Troubleshooting

> Resources for analyzing WebMarshal problems, including event logs, service logs, dump files, the support tool, and solutions to common issues.

This chapter provides a list of resources you can use when analyzing problems with WebMarshal.

## Windows event logs

If there are difficulties when starting the WebMarshal services, or there are any pop-up error messages, more information may be present in the Windows event logs. Open the Event Logs item in the WebMarshal Console, select an appropriate filter, and review the events. See [Viewing Windows event logs](https://docs.levelblue.com/webmarshal/user-guide/managing-configuration#viewing-windows-event-logs) for details.

You can also open the Windows Event Viewer by clicking **Tools > Open Event Viewer** in the console, or from the Windows control panel.

## WebMarshal logs

WebMarshal services log configuration changes and activity in text files. By default these files are located in the Logging folder of the WebMarshal installation on each server. You can choose to enable more detailed logging. See [Configuring advanced settings](https://docs.levelblue.com/webmarshal/user-guide/managing-configuration#configuring-advanced-settings).

> [!NOTE]
>
> To save disk space, the WebMarshal logging folders are compressed.

## WebMarshal dump files

On rare occasions a memory dump file may be created in the WebMarshal installation folder. If your WebMarshal installation has encountered a problem, these files can help LevelBlue to resolve the issue. The file names have the extension `.mdmp`.

If a file of this type is present, contact LevelBlue Technical Support for assistance.

## Support tool

This tool gathers information about the WebMarshal installation and the server WebMarshal is installed on. Its purpose is to help the LevelBlue support team diagnose support issues. To use the tool, run `MarshalSupportTool.exe`, found in the WebMarshal installation directory. For more information on how to use the tool, see LevelBlue Knowledge Base article [Q15024](https://support.levelblue.com/kb/article.aspx?id=15024).

## Some common issues

The following issues are often reported and have simple solutions.

* [Rules are being ignored](#rules-are-being-ignored)
* [Problems using Web Browsers](#problems-using-web-browsers)
* [Problems with non-browser applications](#problems-with-non-browser-applications)
* [Warning Page Causes Some Websites To Fail](#warning-page-causes-some-websites-to-fail)
* [Problems with Secure (HTTPS) Form Submissions](#problems-with-secure-https-form-submissions)

### Rules are being ignored

* Ensure that the rule logic works as expected. Test the page which should trigger the rule using *Test Rules*. See [Testing access policy](https://docs.levelblue.com/webmarshal/user-guide/access-policy-and-rules#testing-access-policy) for details.
* Check that rule processing is enabled. Right-click **Access Policy** in the Console and select **Enable Rule Processing**.

### Problems using web browsers

#### Users have to log on at the beginning of every browser session

WebMarshal requires users to be authenticated (log on) so that user matching Rules can work. Authentication can be by Windows Authentication or Basic Authentication. Windows Authentication negotiates the strongest available protocol from Kerberos or NTLM.

Some browser applications are not able to retrieve the credentials of the Windows user automatically. With these browsers the user must log in to start each session. In most cases users can choose to remember the password. To retrieve the Windows credential automatically, you can use Edge or most current major browsers.

#### Users are unable to authenticate

When users try to access the web, they are repeatedly prompted to enter their user name and password.

Some browsers may support only Basic Authentication. This type of authentication involves passing a user name and password to the proxy server. The proxy server tries to perform a simulated logon to validate the credentials. If the user does not have logon rights on the WebMarshal server computer, logon fails repeatedly.

To resolve the problem, do one of the following:

* Use a browser that supports Windows Authentication, such as Firefox or Microsoft Edge
* On the WebMarshal Server computer, grant the Windows NT permission "log on locally" to all accounts used for browsing

### Problems with non-browser applications

Rules which require that users accept a warning message before allowing access to a certain site are not acceptable to a non-browser based application. This is because the application requests a download but does not receive the expected file; instead it receives the WebMarshal warning message.

To resolve the problem, do one of the following:

* Create a rule to permit open access to the sites concerned
* Grant additional permissions to the users who are affected
* Set up IP/Workstation authentication for the workstations which run the non-browser applications
* Include the target site on the proxy server exclusion list (see [Configuring ports and authentication](https://docs.levelblue.com/webmarshal/user-guide/managing-configuration#configuring-ports-and-authentication)).

### Warning page causes some websites to fail

This usually happens when a site has off-site links, most often when posting a form. The problem occurs when a user enters data into a form and clicks the *Submit* button. WebMarshal presents a page that asks if temporary access is required. If the user clicks *Yes*, they find that the form data has not been correctly posted.

To resolve the problem, several actions are possible:

* Create a rule to permit open access to the sites concerned.
* Grant additional permissions to the users who are affected.

### Problems with secure (HTTPS) form submissions

When WebMarshal requires the user to acknowledge a warning before accessing a secure website, the user is redirected to the root page of the secure site.

Because the original request was submitted and replied to securely, WebMarshal does not have access to the details of the request and cannot return the page requested.

To resolve the problem, you can enable HTTPS content inspection.

If you do not want to inspect HTTPS content for the site, you can create a Standard Rule to allow access to the site. If you do not want to enable HTTPS content inspection, you can create a rule to allow access to all secure sites (`HTTPS://*`). This rule should be evaluated after any general blocking rules (for instance, a rule blocking offensive sites).

## Further help

For any problems not listed here, please see the Knowledge Base and Forum on the LevelBlue Website. If these resources do not resolve the issue please contact your LevelBlue supplier or LevelBlue Technical Support. To access the support resources or to contact Technical Support, please visit [support.levelblue.com/](https://support.levelblue.com/).
