iSAMS Status

Resolved: Dear customers, The following update has been sent to customers that have raised tickets:

Our investigation has found that FortiGate security inspection (SSL/TLS inspection and/or Application Control) is interfering with HTTPS/TLS traffic between your users and Cloudflare infrastructure used by iSAMS. Bypassing Forti inspection for the iSAMS traffic has restored service for multiple affected schools.

Please note: this issue is caused by the FortiGate appliance or / and it's configuration. Because any configuration changes must be made on your firewall, resolving the issue is outside our ability and responsibility. Your school IT team (or your Fortinet support/partner) can implement any configuration changes.

Our recommendation at this time is to add the following to the FortiGate allowed list; Your iSAMS domain wildcard: either *.isamhosting.cloud or *.isams.cloud (whichever your school uses) Your identity provider domains if they are being filtered, eg google, microsoft etc... *.cloudflare.com

Below is the solution one school shared with us that worksaround the issue, it is your schools decision if you decide to also apply the same workaround. Please be aware disabling SSL inspection reduces visibility for those domains and therefore recommend you limit exemptions to the exact domains required. Add a separate policy for each iSAMS URL on HTTPS with no SSL inspection. Place those new policies above any staff internet policies. IPS and Anti-virus to remain in place.

Investigating: Dear customers, Are team are continuing to investigate this issue and updates are being provided via our ticketing system. Please accept our apologies for any inconvenience.

Investigating: Dear customers, We are aware of an issue affecting some of our customers meaning that they are unable to access iSAMS. Our investigation team are reviewing this now and treating this as an urgent priority. Please accept our apologies for any inconvenience.

Resolved: Dear customers, The following update has been sent to customers that have raised tickets:

Our investigation has found that FortiGate security inspection (SSL/TLS inspection and/or Application Control) is interfering with HTTPS/TLS traffic between your users and Cloudflare infrastructure used by iSAMS. Bypassing Forti inspection for the iSAMS traffic has restored service for multiple affected schools.

Please note: this issue is caused by the FortiGate appliance or / and it's configuration. Because any configuration changes must be made on your firewall, resolving the issue is outside our ability and responsibility. Your school IT team (or your Fortinet support/partner) can implement any configuration changes.

Our recommendation at this time is to add the following to the FortiGate allowed list; Your iSAMS domain wildcard: either *.isamhosting.cloud or *.isams.cloud (whichever your school uses) Your identity provider domains if they are being filtered, eg google, microsoft etc... *.cloudflare.com

Below is the solution one school shared with us that worksaround the issue, it is your schools decision if you decide to also apply the same workaround. Please be aware disabling SSL inspection reduces visibility for those domains and therefore recommend you limit exemptions to the exact domains required. Add a separate policy for each iSAMS URL on HTTPS with no SSL inspection. Place those new policies above any staff internet policies. IPS and Anti-virus to remain in place.

Investigating: Dear customers, Are team are continuing to investigate this issue and updates are being provided via our ticketing system. Please accept our apologies for any inconvenience.

Investigating: Dear customers, We are aware of an issue affecting some of our customers meaning that they are unable to access iSAMS. Our investigation team are reviewing this now and treating this as an urgent priority. Please accept our apologies for any inconvenience.