403 Forbidden Errors From Off Campus

Incident Report for UNC Chapel Hill - ITS

Resolved

This inicdent has been resolved.

Root Cause: To mitigate a high-volume traffic flood causing a sitewide outage, three JA3 fingerprints were added to the edge block list.

Issue: These JA3 signatures inadvertently matched legitimate user traffic patterns, resulting in a "malicious activity" security flag for some end-users during SSO/Canvas login.

Resolution: The specific JA3 blocks have been removed from the security controls.

Posted Mar 19, 2026 - 21:46 EDT

Investigating

We are investigating reports of problems with one or more ITS services. Updates will be provided as they become available.
Posted Mar 19, 2026 - 20:53 EDT
This incident affected: Web (Tarheels.live WordPress, Sites WordPress, Web.unc.edu WordPress, School of Medicine WordPress) and Other Services.