Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adobe CC and SSL decryption

Hi,

we have a couple of users that are using Adobe Creative Cloud. Lightroom CC, to be specific (the new cloud based Lightroom that syncs all photos with Adobe Cloud). Users are reporting that photo uploading to Creative Cloud is not working. We have SSL decryption enabled for them and have an exception that already has over 35 URLs in it. The URLs in there were found here on the forum in various posts as well as Adobe's knowledge base and other sources. It still doesn't work. I have done extensive search in the logviewer to find more URLs that are being accessed but to no avail. I am about to give up here, unless someone has an idea?

Needless to say it works flawlessly when SSL decryption is turned off. 

SFOS 17.5.9 MR-9.

Thanks
Sascha

 


This thread was automatically locked due to age.
  • Hi,

    you need to create a rule without any web application other than allow all, but sourced from one of your devices, have the user connect. Then check logviewer -> web filter fo rah list of URLs accessed by the user.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • FormerMember
    0 FormerMember

    Hi cryptochrome,

    I would suggest you to create a test rule for one user with web policy same as your default rule and put that rule at top. Open up a log viewer and change log setting to web filter to show only web filter logs, here you should be able to see requests to the destination web severs. Now make sure to close any open browser tab or application that is connected to the internet to isolate the traffic only to those Adobe application. Try to  replicate the issue now so you should be able to find requested domains by Adobe application and should be able to create exception under WEB > Exception. You simply needs to add domain under URL pattern matches and skip all the checks. This exception will only bypass traffic from web proxy if it is destined to those specific domains only. 

    Thanks,