Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 2599 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adobe CC and SSL decryption

cryptochrome

Hi,

we have a couple of users that are using Adobe Creative Cloud. Lightroom CC, to be specific (the new cloud based Lightroom that syncs all photos with Adobe Cloud). Users are reporting that photo uploading to Creative Cloud is not working. We have SSL decryption enabled for them and have an exception that already has over 35 URLs in it. The URLs in there were found here on the forum in various posts as well as Adobe's knowledge base and other sources. It still doesn't work. I have done extensive search in the logviewer to find more URLs that are being accessed but to no avail. I am about to give up here, unless someone has an idea?

Needless to say it works flawlessly when SSL decryption is turned off. 

SFOS 17.5.9 MR-9.

Thanks
Sascha

 


This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi cryptochrome,

    I would suggest you to create a test rule for one user with web policy same as your default rule and put that rule at top. Open up a log viewer and change log setting to web filter to show only web filter logs, here you should be able to see requests to the destination web severs. Now make sure to close any open browser tab or application that is connected to the internet to isolate the traffic only to those Adobe application. Try to  replicate the issue now so you should be able to find requested domains by Adobe application and should be able to create exception under WEB > Exception. You simply needs to add domain under URL pattern matches and skip all the checks. This exception will only bypass traffic from web proxy if it is destined to those specific domains only. 

    Thanks,

Reply
  • FormerMember
    0 FormerMember

    Hi cryptochrome,

    I would suggest you to create a test rule for one user with web policy same as your default rule and put that rule at top. Open up a log viewer and change log setting to web filter to show only web filter logs, here you should be able to see requests to the destination web severs. Now make sure to close any open browser tab or application that is connected to the internet to isolate the traffic only to those Adobe application. Try to  replicate the issue now so you should be able to find requested domains by Adobe application and should be able to create exception under WEB > Exception. You simply needs to add domain under URL pattern matches and skip all the checks. This exception will only bypass traffic from web proxy if it is destined to those specific domains only. 

    Thanks,

Children
No Data
Unfiltered HTML