“This site has been reported as unsafe”

Topic

New Reply

We run Okta as a 3rd party Idp and have a portal where users can log in and see all the applications they are able to access via Okta.  Microsoft Edge reports this site as a suspicious site when accessing.  We’ve reported it as safe multiple times, but this seems to have no affect.  Is there another solution for our Edge users?

Reply | Quote

Replies

Are your Users using a VPN? This could be a factor in your experience.

VPNs hide the origin IP address, so they are exploited by those with nefarious intentions. Websites on the Internet have Firewalls and Spam Filters to prevent the exploitation. They use are blacklists of misused IP addresses to block abuse.
When you use your VPN, you should check that the IP address your have been given by the VPN is not blacklisted.  You can find your IP at https://db-ip.com/all – it will appear in the box at the upper right. You can check for blacklisting at StopForumSpam and CleanTalk by entering that IP and searching.
If the IP is problematic, you can get another one from the VPN provider.

Reply | Quote

No, this is without any VPN or ZTNA running.  Also, multiple machines from multiple ISPs get the same.

Reply | Quote

So it’s the OKTA site itself?  Do you have an URL I can test?

If it’s smart scan you normally just have to keep asking them to whitelist it.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

RRtechgroup

Reply | Quote

Yes.  It’s a vanity URL for us.  I wouldn’t mind DMing you, but not sending in the blog.

Reply | Quote

Okta has been hacked so it is unsafe

A recent breach of authentication giant Okta has impacted nearly 200 of its clients. But repeated incidents and the company’s delayed disclosure have security experts calling foul.

ON FRIDAY, OCTOBER 20, the identity management platform Okta said it suffered an intrusion in its customer support system. As an access and authentication service, a breach of Okta always comes with risks to other organizations, and the company confirmed that “certain Okta customers” were affected. Okta tells WIRED that it notified “around 1 percent” of its 18,400 customers that they were impacted…

1 user thanked author for this post.

RRtechgroup

Reply | Quote

It’s been doing it way before October 20th.

1 user thanked author for this post.

Alex5723

Reply | Quote

First detected September 29th:

Okta Support System incident and 1Password

1 user thanked author for this post.

RRtechgroup

Reply | Quote

I don’t see it reacting to this url

Log in to your Okta org

So the fact that Okta had an issue probably is not in play here.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

RRtechgroup

Reply | Quote

Alex5723 wrote:

Okta has been hacked so it is unsafe

Link is broken.

Reply | Quote

FWIW, it’s only the vanity URL that’s showing bad in Edge.  Not the actual site at Okta.  It works without issue.  We have a CNAME for the vanity URL pointing to the actual site.

Reply | Quote

Do you have an SSL certificate that doesn’t match?

cheers, Paul

Reply | Quote

I don’t.

I ended up just adding a domain group policy to allow the site to bypass SmartScreening.  Most users don’t use Edge, but those of us who do won’t see it now.  Anyone outside of the org will just continue to see it.

Reply | Quote