We recently added our Nessus instance to Cloudflare Access to connect to it. You can download .html reports from the Nessus page. What we’ve found is when you download a .html report when accessing it through Access, it is removing code from the actual downloaded file itself, which causes the resulting .html download to work incorrectly.
Works fine when accessing Nessus not through Access.
I have a rule setup to completely bypass the WAF for this application, as my only thought was the WAF was somehow causing this, so I’m not sure what would be causing this. I see nothing being blocked in the logs. How would Access be removing code from a downloaded file??