Our users are seeing intermittent 403.14 forbidden errors that we cannot seem to replicate. This started when we moved to Server 2008 R2 from Server 2003 (IIS 6.0).
From the FREB the URL_CACHE_ACCESS_START is RequestURL="/ematerials/include/" but we cannot figure out how the application would generate that as there should be an aspx page appended there. Sometimes users will retry and it will work and other times hit it 15 times in a row (there are 3 servers behind the load balancer so I guess they could be hitting different servers), however we are seeing the 403 errors on all 3 servers.
Sample from the IIS log:
2013-01-05 00:27:05 192.168.60.4 GET /ematerials/include/ - 443 - 64.9.76.229 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1) LastCID=XXXX;+LastUID=jklimuszka;+TabNav=0;+SessionID=DBC02\DB02.EM_XXXXX.em_system.CHSDSTRECCLERK.0.1112805.WilkesBa+MAT.7932;+TopPage=https://proclick.mediclick.com/ematerials/include/frMain.aspx?TOC=EMMain&WEL=../Welcome.aspx;+CAOnly=False https://proclick.mediclick.com/ematerials/include/StdPage.aspx?PC=Ctrl.ReceiptForPOCreate&ID=285553&Action=Get&Request=%3CpageRequest%20Action%3D%22%22%3E%3CcontextInfo%3E%3Cfields%3E%3C/fields%3E%3Crow%20ID%3D%22285553%22%20mode%3D%22%22%20copiedFromID%3D%220%22%20viewName%3D%22vPOForReceivingLst%22%3E%3Cfields%3E%3CTableID%3EPOR%3C/TableID%3E%3CRowID%3E285553%3C/RowID%3E%3CAttType%3EUN%3C/AttType%3E%3C/fields%3E%3C/row%3E%3C/contextInfo%3E%3CglobalContext%20sessionCookie%3D%22DBC02%5CDB02.EM_XXXX.em_system.CHSDSTRECCLERK.0.1112805.WilkesBa%20MAT.7932%22%20jobName%3D%22%22%20traceID%3D%220%22%20hID%3D%2217534629%22...
Any ideas?
Thanks,
Jim