diff --git a/guacamole-common/src/main/java/net/sourceforge/guacamole/servlet/GuacamoleHTTPTunnelServlet.java b/guacamole-common/src/main/java/net/sourceforge/guacamole/servlet/GuacamoleHTTPTunnelServlet.java
index 44583e30c..90d91ab60 100644
--- a/guacamole-common/src/main/java/net/sourceforge/guacamole/servlet/GuacamoleHTTPTunnelServlet.java
+++ b/guacamole-common/src/main/java/net/sourceforge/guacamole/servlet/GuacamoleHTTPTunnelServlet.java
@@ -170,7 +170,7 @@ public abstract class GuacamoleHTTPTunnelServlet extends HttpServlet {
         // HTTP response, logging each error appropriately.
         catch (GuacamoleSecurityException e) {
             logger.warn("Authorization failed.", e);
-            sendError(response, HttpServletResponse.SC_UNAUTHORIZED);
+            sendError(response, HttpServletResponse.SC_FORBIDDEN);
         }
         catch (GuacamoleResourceNotFoundException e) {
             logger.debug("Resource not found.", e);