topic Re: 403 Forbidden - Microsoft Azure Application Gateway in SAS Viya

403 Forbidden - Microsoft Azure Application Gateway

AllanBowe — Tue, 13 May 2025 08:16:32 GMT

When submitting a relatively large (>20k lines) SAS program in SAS Studio we are getting the 403 below

We are also unable to upload the file to SAS Content, or the SAS Server directly using the file explorer (just hangs)

SYSVLONG=V.04.00M0P030625

Product name:

SAS® Studio (Analyst)

Version:

Stable 2025.03

Release:

20250506.1746542786204

Any hints / suggestions?

Re: 403 Forbidden - Microsoft Azure Application Gateway

gwootton — Wed, 14 May 2025 16:56:38 GMT

The rejection seems to be coming from the application gateway, based on your description I'm guessing you're running against a size limitation in the configuration of the gateway. Here's some doc I found on Microsoft's site that might apply.

https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-request-size-limits

Re: 403 Forbidden - Microsoft Azure Application Gateway

jazmon — Tue, 27 May 2025 15:12:00 GMT

Hello Allan,

Do you also get the 403 error on any other large code?
If you were to break the code up into parts, can you run them without issue or does a certain part fail?

With regards to uploading the file to SAS Content or the SAS Server directly, if you are not a SAS Admin for the system, can the SAS Admin upload the file to the server or to SAS Content or does it still hang?

Also, how big is the file you are trying to upload? If it is failing to upload (even for the SAS Admins), this could point to some corruption in the file itself. Are you able to open the file in another application (SAS or not) and what is the type of file?

The 403 error generally means you don't have authorization to do something, meaning your access to run part of the code or save to a certain file/folder is being blocked. Are the SAS Admins able to run the code without issue or do they also get the 403 error?

Re: 403 Forbidden - Microsoft Azure Application Gateway

AllanBowe — Thu, 29 May 2025 18:43:02 GMT

Thanks @gwootton and @jazmon for your feedback!

Indeed the problem turned out to be nothing to do with SAS and an issue with the external (to SAS platform) Azure Gateway.

The SAS Admin "removed the limits on the WAF associated with the NetApp gateway" and the issue was fixed.

Related SAS Track: CS0255081