Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 1863 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

docusign TLS decryption error - HTTP parsing error encountered

LHerzog

Using TLS decryption and vendor Docusign suddenly causes issues with our XG firewall on 19.5.3.

Happens also on other browsers and OS. Here Safari in MacOS.

it works using classic proxy as described here:

https://support.sophos.com/support/s/article/KB-000039454?language=en_US

I wonder why that suddenly happens and what will happen with such sites when Sophos turns that "classic proxy" off some day?



This thread was automatically locked due to age.
Parents
  • 0

    update: admin.docusign.com was no longer working even in classic proxy.

    it was required to add an additional exclusion for https decryption in classic web proxy for admin.docusign.com

  • 0 in reply to LHerzog

    LHerzog,

    Thanks for posting this. We had experienced the exact same issue earlier today and also had to bypass decryption for this site. Is it possible the sites are dropping the older, less secure encryption protocols and cipher suites and the XG has trouble decrypting the protocols in use? Below is from the apps.docusign.com site.

Reply
  • 0 in reply to LHerzog

    LHerzog,

    Thanks for posting this. We had experienced the exact same issue earlier today and also had to bypass decryption for this site. Is it possible the sites are dropping the older, less secure encryption protocols and cipher suites and the XG has trouble decrypting the protocols in use? Below is from the apps.docusign.com site.

Children
No Data
Unfiltered HTML