After implementing istio, the service which was working before on browser has started giving 403 forbidden error.please note that this service still works inside k8 cluster and gives 200 response but on the browser it responds with 403 forbidden when it is called from other service.

what could be the reason?

any help appreciated.