ArcGIS Portal - Content cannot be displayed in a frame

[LanceCole]

I am working on a new deployment of ArcGIS Enterprise 10.7.  As I was testing the new ArcGIS Portal Server and Site, I noted when you navigate to the Organization > Status page on the portal Home site an error message is received in IE and Chrome.  All other pages appear to be working and I have not federated yet.  The error indicates "This Content cannot be displayed in a frame".  The error occurs weather you are accessing the site directly via port 7443 or through the web adapter.  Screen shots below including browser console errors.

IE:

Chrome:

I noted both are reporting a frame error as well as a user not logged in error.  I am logged in as the portal administrator and all other pages/tabs are working.  I also tried to add a HTTP Response Header to IIS for X-Frame-Options on the Portal Web Adapter using both ALLOW-FROM and SAMEORIGIN.  This did not help for either IE or Chrome.

I did find if I click the "Open content in new window" from IE, I am asked to sign in again from a new IE Tab and a 404 Error message - page not found will display.  However, if I then go back to the original page and refresh the status page will load or anytime there after.

Any ideas?  Will put a ticket in on Monday but thought I would try posing here in the mean time.

[LanceCole]

Follow-up - I found if I clear the cache in IE and Chrome, the status page will load when using the FQDN of the web server hosting the web adapter.  https://<Webserver_FQDN>/<webadapter>/home but if I use the portal server https://<Portal_server_FQDN>:7443/arcgis/portaladmin or a pointer to an alias to the webserver https://<Alias_to_WebServer>/<webadapter>/home the status page will not load.  All other pages on the portal site appear to be working.

[RandallWilliams]

We set X-Frame-Options to SAMEORIGIN at the GIS Server tier on any page/form that has a login prompt to prevent phishing through frames/Clickjacking/URL Redress attacks. X-Frame-Options: DENY prevents rendering pages in an iFrame. I've never seen users have problems with this header without attempting to view these pages through iFrames. It's not necessary to set any additional headers at the web tier. I'm unsure why in your instance multiple browsers think that this page is being framed. That's certainly unusual behavior.

[LanceCole]

Randall,

I looked into this a little further.  I found if I log onto Portal via the https://<Portal_server_FQDN>:7443/arcgis/home url, in our test sandbox deployment it is https://gisprt01.lgc.local:7443/argis/portal, all traffic is going through this path.  However, as soon as I go to the Status tab under Organization, it is using our web adapter alias for the path.  This is https://gis.lgc.local/portal on the test deployment.  This is resulting in the error shown as the path in the browser does not match the path being used.  The browser path is https://gisprt01.lgc.local:7443/arcgis/home/organization.html#status.  Go to another tab and it reverts back to the proper path.  So far, only fond this issue on the Organization > Status page on portal in both IE and Chrome.

[LanceCole · Accepted solution]

After working with ESRI Support, it has been determined this is a bug with the 10.7 Web Adapter/Portal and is currently being looking into further for possible resolution or correction in the next release. 

• BUG-000121872 In Portal Status page, when accessing Portal through ports URL, the requests are forwarded to Portal webadaptor URL and the page does not load with "Unable to load content in a Frame" error on Internet explorer and "Portal webadaptor URL is not accessible" error on Chrome browser. This happens on all machines except the machine on which Portal is installed.