This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NET::ERR_CERT_AUTHORITY_INVALID Redirected to User Portal

busthead over 3 years ago

Not sure what's going on.

Browsing to https://link.lastpass.com/contactsupport results in NET::ERR_CERT_AUTHORITY_INVALID

and the certificate is from my UTM, not lastpass.com:

Clicking Advanced and Continue...takes me to the User Portal:

I believe the associated Web Filter log is:

2021:02:24-12:22:47 Hillary-1 httpproxy[1168]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.REDACTED.REDACTED" dstip="204.79.197.219" user="" group="" ad_domain="" statuscode="204" cached="0" profile="REF_HttProContaDeckeNetwo3 (REDACTED's Devices)" filteraction="REF_HttCffREDACTEDConteFilte (REDACTED's Content Filter Action)" size="0" request="0xe13c4a00" url="">edge.microsoft.com/.../generate_204" referer="" error="" authtime="0" dnstime="459" aptptime="114" cattime="23411" avscantime="0" fullreqtime="94951" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36 Edg/88.0.705.74" exceptions="av,sandbox,fileextension" category="105" reputation="trusted" categoryname="Business" country="United States" application="micrsoft" app-id="1151"

This thread was automatically locked due to age.

Parents

0 FormerMember over 3 years ago

Hi busthead,

Thanks for reaching out to the Community!

Would it be possible to share screenshots of how your web filtering is configured? If possible, could you turn on the support access tunnel on your appliance and PM me with the access ID?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 busthead over 3 years ago in reply to FormerMember

Web filter screenshots below. Strangely, the 'REDACTED Content Filter Action' is not enabled but appeared in the log entry I previously provided.

I've also PM'd you my Access ID.

Thx
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to busthead

Hi busthead,

Have you imported the proxy CA into the users' browser?

Since it's a transparent proxy, users will see the certificate error when they visit a blocked category or website instead of a UTM warning page.

Check out the following KBA for more info: Sophos UTM: How to Deploy the Web Protection Proxy CA

What if you turn off the user portal for testing? Go to Management > User Portal > Global

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 busthead over 3 years ago in reply to FormerMember

Importing the UTM proxy cert just skips the NET::ERR_CERT_AUTHORITY_INVALID screen and goes directly to the UserPortal.

When I attempt to disable the UserPortal:
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 busthead over 3 years ago in reply to FormerMember

Importing the UTM proxy cert just skips the NET::ERR_CERT_AUTHORITY_INVALID screen and goes directly to the UserPortal.

When I attempt to disable the UserPortal:
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data