Secure Connection Failed error with DPI for https://www.googleadservices.com/

Add googleadservices.com to the Local TLS Exclusion list

Dear Stuart

Already added in local TLS ,Still error?

BR

Vishvas

Rana Sharma could you take a look please.

VishvasChitale you have the same client as I reported here:

https://community.sophos.com/products/xg-firewall/sfos-eap/sfos-v18-early-access-program/f/feedback-and-issues/115778/using-the-new-dpi-ssl-tsl-linkedin-does-not-open-with-firefox-on-mac

https://community.sophos.com/products/xg-firewall/sfos-eap/sfos-v18-early-access-program/f/feedback-and-issues/115834/tls-ssl-inspection-rule---few-website-are-not-opening-like-linkedin-vmware-without-ssl-tls-exception---internet-browsing-is-very-low-in-my-case

AFAIK, the issue is under investigation.

Regards

Hi Vishvas Chitale 

Thanks for the feedback . Please follow the below steps as temporary workaround for as of now and share the feedback 

1. From Firefox, execute 'about:config' to open up advanced settings
2. Search for setting and set it to false
   - security.ssl.enable_false_start

Have you tried with another browser ?

Thanks,

Rana Sharma

The underlying problem was not XG.

Vishvas was also using Endpoint with Web Control, configured to block Advertising.  

The only way that Endpoint Web Control can block HTTPS websites is to kill the connection, resulting in the message he saw.

Confirmed there is no issue in either XG or Endpoint.