HTTP Status Code 403 stands for Forbidden
The HTTP 403 Forbidden client error status response code indicates that the server understood the request but refuses to authorize it.
This status is similar to 401, but in this case, re-authenticating will make no difference. The access is permanently forbidden and tied to the application logic (like an incorrect password).
Most likely this is due to incorrect JMeter configuration and/or missing/incorrect correlation, I would suggest the next steps:
- Make sure you have HTTP Cookie Manager added to your Test Plan
- If your application is protected with external authentication system like Basic HTTP Authentication, NTLM or Kerberos you need to handle it properly using HTTP Authorization Manager
- If your application is expecting some form of security token as request parameter or request header or cookie or whatever you will need to extract it from previous response using i.e. Regular Expression Extractor, convert it into a JMeter Variable and add it as a parameter to the next request.
Above are general recommendations, we need to see your test plan snapshot and request/response details in order to be able to help you to get to the bottom of the problem