Web Protection: Web Filtering & Application Visibility/Control Webproxy "overrides" certificate?

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 6 replies
Subscribers 4 subscribers
Views 1763 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Webproxy "overrides" certificate?

GernotMeyer over 5 years ago

Hi all,

we have an UTM 9.5. Webproxy is in Standard Mode and SSL scan is off.

There is one external page with a valide certificate. Calling that page (SSL) with any browser is fine.

When login to an application on this page, the "unsafe" webproxy CA Certificate from the UTM shows up.

Accepting twice (unsafe certificate) the valide cert from that page comes back again.

That phänomen is only with IE (on all computers), not with Firefox or chrome and only one page.

So turning off the webproxy from standard to transparent mode and the problem is gone.

I have no idea what causes this reaction. What causes the UTM proxy to replace a cert from an external page?

This thread was automatically locked due to age.

Parents

0 dirkkotte over 5 years ago

Without SSL-Scanning the "unsafe" webproxy CA Certificate ist used by the UTM to show error or message pages generated by UTM.

Blocked popups/categories (from ADS or diagnostic redirects) can use these certificate too.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 GernotMeyer over 5 years ago in reply to dirkkotte

OK. I expected this.

Is there any idea how to figure out which kind of error message this is?
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 5 years ago in reply to GernotMeyer

î would use the webproxy log filtered by the client-ip.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 GernotMeyer over 5 years ago in reply to dirkkotte

ugly job but I will try.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 5 years ago in reply to GernotMeyer

Wenn der Kaffee gut ist, komme ich vorbei (Potsdam).

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dirkkotte over 5 years ago in reply to GernotMeyer

Wenn der Kaffee gut ist, komme ich vorbei (Potsdam).

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data