HTTPS scanning mobile devices

Jim,

did you import the CA used for decrypt and scan on your mobile?

Yes i have imported the Sophos_SSLCA as well as the Defult certificate from the Sophos to my mobile devices. 

Like i said i am able to use the browser fine and it will go to https sites with no cert errors. It is just apps on the device that do not seem to work when https scanning is enabled. 

I can use the browser on my chromebook and go to play.google.com and it works fine. But from the google play app it acts like there is no internet connection. 

Same on my iphone with the apple store. 

Try to add exceptions on web filtering for the following domains:

google.com
googleapis.com
gstatic.com
googleusercontent.com
accounts.google.com
drive.google.com
docs.google.com

Try to add exceptions on web filtering for the following domains:

google.com
googleapis.com
gstatic.com
googleusercontent.com
accounts.google.com
drive.google.com
docs.google.com

Ok i didnt have a couple of those and the play store works now and my content filters are in tack!

now my question is where did you go to get all those exclusions? I will need to track down exclusions for other apps as i find them that are not working. 

For example the apple store even though i have ^([A-Za-z0-9.-]*\.)?apple\.com\.?/ in my exclusions 

For applestore, add these:

^([A-Za-z0-9.-]*\.)?cdn-apple\.com\.?/

^([A-Za-z0-9.-]*\.)?icloud\.com\.?/

^([A-Za-z0-9.-]*\.)?mzstatic\.com\.?/

^([A-Za-z0-9.-]*\.)?apple\.com\.?/

This worked for apple! Thanks a log. 

However back to google. I sopke to soon. If i have google.com in the exclusions then how will content filters or keywords in searches ever get blocked/warned? 

Try to remove google.com and see if it works.

removing google allows the blocking of keyworks/content filter but play store does not work. I joined a android phone to the same rule and playstore says internet is disconnected, youtube will not play etc. 

Use the log viewer or drop-packet-capture from XG console while you open the play store to understand the URLs and then put them under the exception lists.

Regards