Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Troubleshooting AD Group Header Size

Overview

Starting SCP 4.7.0 release the default AD Group header size that we support was increased from 4K to 8K. With this change, it was observed that customers using multibyte characters as part of their AD group headers (especially in the APAC region) faced issues related to authentication, redirection & pop connectivity for those regions when user groups got bloated as total header size exceeded the maximum header size limit.

Hence, starting SCP version 4.9.3, customers will be provided with the flexibility to select the AD Group Header size that they would like to use based on their requirements.  However, the default value of AD Group Header size will still be 8K as has been the case since SCP 4.7.0 release.

Which Customers Using Are Impacted

Customers use multibyte characters as part of their AD Group Header with the group header size set to 8K.

Scenario When Customers Using Are Impacted

Customers using SCP versions 4.7.0 and later (till version 4.9.2) using multibyte characters in their AD Group Header size see this issue.

What is the Impact On Customers Using 

Customers using the above-mentioned combination have the potential to facing issues related to authentication, traffic redirection, and POP connectivity for those regions as the total header size exceeds the maximum header size limit.

Solution

Impacted customers can upgrade to SCP version 4.9.3 and change the supported Group Header size to 4K. For more details, see Configure Group Header Size.

  • Was this article helpful?