Why is https://api.hubapi.com/ marked as high-risk by Palo Alto firewall

VVulovic · ‎Aug 9, 2021

Hi,

Recently, we stopped being able to use https://api.hubapi.com/ because our Palo Alto firewall is marking it as high-risk. Our Security team does not want to override this decision, and they advised us to contact you.

<html>\r\n<head>\r\n<title>Web Page Blocked</title>\r\n<meta http-equiv="Content-Type" content="text/html; charset=utf-8">\r\n<META HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE">\r\n<meta name="viewport" content="initial-scale=1.0">\r\n<style>\r\n  #content {\r\n    border:3px solid#aaa;\r\n    background-color:#fff;\r\n    margin:1.5em;\r\n    padding:1.5em;\r\n    font-family:Tahoma,Helvetica,Arial,sans-serif;\r\n    font-size:1em;\r\n  }\r\n  h1 {\r\n    font-size:1.3em;\r\n    font-weight:bold;\r\n    color:#196390;\r\n  }\r\n  b {\r\n    font-weight:normal;\r\n    color:#196390;\r\n  }\r\n</style>\r\n</head>\r\n<body bgcolor="#e7e8e9">\r\n<div id="content">\r\n<h1>Web Page Blocked</h1>\r\n<p>Access to the web page you were trying to visit has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error.</p>\r\n<p><b>User:</b> hq\\vrankovic </p>\r\n<p><b>URL:</b> api.hubapi.com/crm/v3/properties/companies?hapikey=0c787c33-5401-42db-b789-fbcebc2ebc4d </p>\r\n<p><b>Category:</b> high-risk </p>\r\n</div>\r\n</body>\r\n</html>

Please advise.

Best regards,

Vuk

Willson · ‎Aug 11, 2021

Hey @thibauls and any users encountering a Palo Alto block,

We haven't received a response yet from Palo Alto and want to request if it's possible for you to request that api.hubapi.com be removed from the "High Risk" category too.

Again, should we get an update on our end, I will update this thread.

Thanks

Product Manager @ HubSpot

VVulovic · ‎Aug 11, 2021

Where do we do that?

Thanks,

Vuk

Willson · ‎Aug 11, 2021

Hey @VVulovic ,

This can be sent to the Palo Alto support team:

https://support.paloaltonetworks.com/Support/Index

Thanks

Product Manager @ HubSpot

thibauls · ‎Aug 11, 2021

I did a request but not sure that we can do much. Did you fix anything on your api or js file that should solve that problem?

thibauls · ‎Aug 10, 2021

Someone from hubspot told me that this was fix but when I check it is the same error.
https://urlfiltering.paloaltonetworks.com/query/
api.hubapi.com

Willson · ‎Aug 11, 2021

Checking on the Palo Alto status, @thibauls - We got updates from a few other resources but not on this one as of yet. Will update when I know more.

Product Manager @ HubSpot

Willson · ‎Aug 10, 2021

Hey @VVulovic , @thibauls ,

Providing a further update here, our team have reached out to the appropriate parties to have this updated. We're awaiting an update and will respond here once we have a resolution for this issue.

Thanks for your patience here.

Product Manager @ HubSpot

Willson · ‎Aug 9, 2021

Hey @VVulovic , @thibauls ,

I just wanted to let you know that I am investigating this with our team now and will provide any updates on our position once I know more.

Thanks

Product Manager @ HubSpot

thibauls · ‎Aug 9, 2021

We have the same problem. The api is not usable within our organization. We can't use the api or access the API website or download the export files. The problem began last monday!

I did some research and it seems that it is blocklisted.

Is this a false positive? Hubspot needs to fix this quickly.
Please help if you have any solutions.

We can see here some information about the scan

https://scanner.pcrisk.com/detailed_report/api.hubapi.com#

APIs & Integrations