I'm currently working on a web app and seem to be having a few problems with the app being blocked by office firewalls of our test groups. My background is in design / front end so my knowledge of network stuff is a bit fuzzy.
I'll describe our architecture and see if anyone can think of any daft oversights which may be causing the site to be blocked.
- App front end and api are sitting on different servers
- Communicate through RESTful JSON api with CORS enabled
- Front end and api are both sub-domains of the same domain app.example.com api.example.com
- We have a wildcard ssl Namecheap configured and working
Everything works fine from my domestic WIFI / 4G, but gets blocked in some (not all) office environments. Any ideas to how we could improve this?