ASB Bank Fastnet Logon

Forums › Off topic › ASB Bank Fastnet Logon

1 | 2 | 3

meow
13732 posts

Uber Geek
+1 received by user: 11152

Moderator

ID Verified

Trusted

Lifetime subscriber

#3495117 25-May-2026 13:58

yitz:

Path MTU size issue? Since it's distributed using Akamai you could try testing/changing between an alternate DNS resolver like Cloudflare/Google Public DNS and ISP DNS.

^^ this. What router are you using? I won't say it is anything to do with DNS however.

geek3001: Support from the bank has proven to be very poor, especially with their puerile chat system they provide now for interaction with them. The staff behind that seem to be more interested in closing queries as quickly as possible to improve their resolution rate stats rather than providing a proper reply.

The teams who handle these support cases have to also handle many others. Unfortunately when it works for everyone except you then the issue is on your end, not theirs.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup) | Starlink

NZ Politics 2026 Tracking & Quiz: https://nzpol.nz

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

ANglEAUT

altered-ego
2505 posts

Uber Geek
+1 received by user: 903

Trusted

Lifetime subscriber

#3495121 25-May-2026 14:29

michaelmurfy: ... Unfortunately when it works for everyone except you then the issue is on your end, not theirs.

& how do you propose to resolve the issue on your end if you get fobbed off with 9 year old info that is no longer relevant? It's poor customer service from them, even if the issue is on my end.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

yitz

2328 posts

Uber Geek
+1 received by user: 620

#3495122 25-May-2026 14:30

michaelmurfy:

I won't say it is anything to do with DNS however.

The different browsers giving different results might point toward alternative DNS/DoH in play working around the issue. In general the further away the destination is the more likely a problem with MTU size but sometimes it can also be ISP-specific - a problem on the path to local Akamai servers. I see Spark and 2degrees resolve the hostname to their own Akamai clusters while others (or when using third party DNS) use one connected via the peering exchange. I am saying test both instances.

geek3001

544 posts

Ultimate Geek
+1 received by user: 946

ID Verified

Subscriber

#3495237 25-May-2026 20:02

michaelmurfy:

The teams who handle these support cases have to also handle many others. Unfortunately when it works for everyone except you then the issue is on your end, not theirs.

Fair point, and I am well aware of that fact as I have been on both sides of tech support in the past. However in this case, they:

claimed they had called me to discuss, when in fact they did not call me;
told me to refer to the supported browser info on their website, which is nine years old;
when I asked them to validate the browser support info given its age, they said they would escalate my query to tech support and let me know the result. They then closed the query with no answer and as of today two weeks later, the browser support on their website is still the out-dated info.

michaelmurfy

meow
13732 posts

Uber Geek
+1 received by user: 11152

Moderator

ID Verified

Trusted

Lifetime subscriber

#3495239 25-May-2026 20:22

Moving past that.

What router do you have and have you also tried another router if you have one? This is sounding like a MTU issue.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup) | Starlink

jm3

89 posts

Master Geek
+1 received by user: 20

ID Verified

#3495400 26-May-2026 06:52

I tried a few things last night with no progress.

I fired a kali linux vm up this morning no difference.

This morning rebooted router and tried incognito window and that worked in both firefox/chrome. Still fails outside of incognito.

I'm with quic static ip via dhcp - mikrotik router mtu 1500.

Dyson

Shop now for Dyson appliances (affiliate link).

geek3001

544 posts

Ultimate Geek
+1 received by user: 946

ID Verified

Subscriber

#3495409 26-May-2026 08:09

michaelmurfy:

What router do you have and have you also tried another router if you have one? This is sounding like a MTU issue.

I have tried using Grandstream, Ubiquiti, and an old Spark router I pulled out and tried this morning.

ISP is Spark and MTU is 1500, per Spark's config for non-Spark devices.

Same result with all. Every other website I visit works fine, except ASB's logon process (the rest of ASB's website works fine).

openmedia

3535 posts

Uber Geek
+1 received by user: 913

Trusted

#3495470 26-May-2026 11:07

I had problems with Firefox on Fedora 44 yesterday afternoon, but everything started working after about 6pm.

Google-Chrome still worked at that time so it isn't specific to my connection.

Generally known online as OpenMedia, now working for Red Hat APAC as a Technology Evangelist and Portfolio Architect. Still playing with MythTV and digital media on the side.

michaelmurfy

meow
13732 posts

Uber Geek
+1 received by user: 11152

Moderator

ID Verified

Trusted

Lifetime subscriber

#3495473 26-May-2026 11:27

Just tested on MacOS and getting the same / Firefox:

And also getting the same with Safari:

I tested this across 3 different connections with the same result. There is something funky going on with their WAF I think!

Not getting this across other Akamai powered sites. Can login to Kiwibank IB for example totally fine.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup) | Starlink

yitz

2328 posts

Uber Geek
+1 received by user: 620

#3495485 26-May-2026 12:31

Yeah if it's dropping you instantly without waiting for timeout then it's probably not MTU on a link between you and the Akamai server (of course could still be dropped past that by the WAF).

I think https://www.akamai.com/us/en/clientrep-lookup is the site for Akamai reputation look up.

Asked a family member and they did not have issues with ASB log in and IP Address did not receive a bad risk score.

Not actually sure what signals they use to determine reputation but I know with Google reCAPTCHA signing into a Google account helps.

geek3001

544 posts

Ultimate Geek
+1 received by user: 946

ID Verified

Subscriber

#3495492 26-May-2026 12:52

michaelmurfy:

Just tested on MacOS and getting the same / Firefox:

If we take their browser and OS support info literally, you are using an unsupported OS, as MacOS is not listed at https://www.asb.co.nz/help/what-internet-browsers-can-i-use-to-view-asb-websites.html which is ridiculous.

They even provide a broken link to download Internet Explorer FFS !

This is the reason I was pushing support for correct, updated browser / OS support info, however ASB's chat support have shown no interest. I'm actually trying to help them improve.

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

michaelmurfy

meow
13732 posts

Uber Geek
+1 received by user: 11152

Moderator

ID Verified

Trusted

Lifetime subscriber

#3495509 26-May-2026 14:50

geek3001: If we take their browser and OS support info literally, you are using an unsupported OS, as MacOS is not listed at https://www.asb.co.nz/help/what-internet-browsers-can-i-use-to-view-asb-websites.html which is ridiculous.

They even provide a broken link to download Internet Explorer FFS !

Agreed. It's pretty poor form. Their IB doesn't even work with IE:

Their SSL cipher support only supports modern browsers; so that page is incredibly out of date.

I've escalated it to somebody who works on that platform so hopefully something gets properly investigated and fixed soon.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup) | Starlink

geek3001

544 posts

Ultimate Geek
+1 received by user: 946

ID Verified

Subscriber

#3495525 26-May-2026 15:23

michaelmurfy:

I've escalated it to somebody who works on that platform so hopefully something gets properly investigated and fixed soon.

Good, thanks. Look forward to an update due course.

Andib

1414 posts

Uber Geek
+1 received by user: 1002

ID Verified

Trusted

#3495536 26-May-2026 16:38

michaelmurfy:

Agreed. It's pretty poor form. Their IB doesn't even work with IE:

Their SSL cipher support only supports modern browsers; so that page is incredibly out of date.

I've escalated it to somebody who works on that platform so hopefully something gets properly investigated and fixed soon.

Not to go too far off topic, but there's a difference between IE on Windows 10 & IE on Windows XP when it comes to cipher support

<#
.DISCLAIMER
Anything I post is my own and not the views of my past/present/future employer.
#>

cddt

2181 posts

Uber Geek
+1 received by user: 2145

#3496038 28-May-2026 08:57

Tested ASB login this morning with Firefox on Linux (F44), worked fine.

1 | 2 | 3