Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 15 subscribers
  • Views 1975 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Certificate for Sophos Web Protection Warnings?

rtecklen

Hello,

in Sophos Web Protection (via Sophos Central / Sophos Endpoint Protection) if you want to access a blocked website, sophos answers the http/https-request instead of the internet web server with a "website blocked" notice. Unfortunately it does it without encryption. So if we try to access a https website, our browser throws an ssl error because the sophos notice site isn't encrypted where it should have been.

As the user wanted to access another destination in the first place, everyone would assume a problem at the webhoster and noone gets the idea that Sophos Endpoint Protection kicked in and caused the error. Is there a possibility to get a certificate and make Sophos display it's warnings with ssl?

Greetings,
Robert



This thread was automatically locked due to age.
Parents
  • 0

    Hello Robert,

    this seems to be a misconception w.r.t. SSL or rather TLS. You can't just get a certificate and display warnings with [TLS]. Amongst other things a secure connection prevents connection hijacking and man-in-the-middle attacks. A certificate is not something you simply slap on your data to make the browser accept it instead of someone else's. And you can't encrypt the mimicked response with an arbitrary key. Otherwise a crook would merely have to divert the traffic to his encrypted site.

    Christian

Reply
  • 0

    Hello Robert,

    this seems to be a misconception w.r.t. SSL or rather TLS. You can't just get a certificate and display warnings with [TLS]. Amongst other things a secure connection prevents connection hijacking and man-in-the-middle attacks. A certificate is not something you simply slap on your data to make the browser accept it instead of someone else's. And you can't encrypt the mimicked response with an arbitrary key. Otherwise a crook would merely have to divert the traffic to his encrypted site.

    Christian

Children
No Data
Unfiltered HTML