HTTPS inspection + Sites Blocked enabled and Firefox error

Firefox uses their own Certificate store and does not access the windows cert store. 

https://blog.mozilla.org/security/2019/02/14/why-does-mozilla-maintain-our-own-root-certificate-store/

Personal speaking one step behind chrome, because it is most likely not manageable via GPO etc. 

HI,

I deployed a script for Firefox to change Cert Store to IE. That worked fine.

But now, blocked message is:

This is a message from the IT Department.

The web site you are trying to access:
mail.google.com/.../
is listed as a site within the category Web E-Mail

Current Internet Access Configuration for you does not allow visiting sites within this category at this time.

If the website has been erroneously blocked, please submit it for re-evaluation.

I tried some tips to change it but... same message

regards

Hi Edgar_Quintana,

Have you tried to import the certificate in Firefox manually? If you import it manually does it work? 

Thanks,

Hi,

This message is shown using IE or Firefox..both with cert included.

Hi,

Any idea?

Regards

Hi Edgar Quintana 

Please could you post a screenshot of the certificate being shown as invalid.  We will need the "General" tab and "Details" tab information.

For the "Details" tab please ensure you have screenshotted the "Subject Alternative Name" and "Subject" fields.

You should also ensure that your certificate SAN (subject alternative name) details includes either the FQDN of the XG or the IP address of the XG.  Then you will need to ensure that you have configured "Admin console and end-user interaction" page which can be found under "System"->"Administration"->"Admin Settings"

Thanks.

Hi Edgar Quintana 

Please could you post a screenshot of the certificate being shown as invalid.  We will need the "General" tab and "Details" tab information.

For the "Details" tab please ensure you have screenshotted the "Subject Alternative Name" and "Subject" fields.

You should also ensure that your certificate SAN (subject alternative name) details includes either the FQDN of the XG or the IP address of the XG.  Then you will need to ensure that you have configured "Admin console and end-user interaction" page which can be found under "System"->"Administration"->"Admin Settings"

Thanks.

HI,

Cert imported fine using GPO.

I still have the problem with blocked sites....

Where is this message to change it?

This is a message from the IT Department.

The web site you are trying to access:
mail.google.com/.../
is listed as a site within the category Web E-Mail

Current Internet Access Configuration for you does not allow visiting sites within this category at this time.

If the website has been erroneously blocked, please submit it for re-evaluation

Hi Edgar Quintana 

You can access the default messages by going to: "Protect"-> "Web" -> "User notifications"

Thanks.

This is the config but I can not read that messeage or, If I change and write a new one... I can not see it when category is blocked