This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problems with the visualization of blocking in web filtering

Good morning:

I am configuring my utm-9 web protection. The fact is that I am working the blockages with the guidelines that I have been finding through the forum.

The problem I have is that in firefox it shows me that the content is being blocked from the firewall, as you can see in the following photo:

But with the rest of the browsers I get the certificate error, and it shows nothing ....

How can I see it from any browser?
I tried installing the certificate ca and nothing

This thread was automatically locked due to age.

0 ThorstenSult over 4 years ago

Hi,

you have to import the correct proxy-certificate. Use this link: http://passthrough.fw-notify.net/cacert.pem
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruflex over 4 years ago in reply to ThorstenSult

I import the certificate, but dont work....

Thanx for your help
Cancel
Vote Up 0 Vote Down

Cancel
0 ThorstenSult over 4 years ago in reply to Ruflex

Please check if the proxy certificate is still valid. Furthermore you have to check if the hostname of the UTM can be resolved correctly via DNS.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruflex over 4 years ago in reply to ThorstenSult

the certificate expires in 2021. I just added the name of the firewall host to dns ... but we remain the same ...
Cancel
Vote Up 0 Vote Down

Cancel
0 ThorstenSult over 4 years ago in reply to Ruflex

What does the browser complain about the certificate?
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruflex over 4 years ago in reply to ThorstenSult

It does not show the warning that the website is blocked. It happens to me with chrome, intenet explorer, edge ... The only one that shows it well is firefox
Cancel
Vote Up 0 Vote Down

Cancel
0 ThorstenSult over 4 years ago in reply to Ruflex

Sure! But I meant this:

And which address is in the address bar of the browser?
Cancel
Vote Up 0 Vote Down

Cancel
+1 MasterRoshi over 4 years ago

Did you install the certificate CA in the trusted root repo?

Your Firefox screenshot is an HTTP request not HTTPS as well. You would see the same behavior in HTTPS if the certificate is not installed properly.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruflex over 4 years ago in reply to MasterRoshi

In firefox works fine, http or https....

The problem is with any page that is blocked, the screen does not appear. It doesn't matter if it's http or https ....

The certificate that is imported is the same in firefox as in chrome ... The error that comes out in chrome is this:

mail.google.com normally uses encryption to protect your information. When Google Chrome tried to connect to mail.google.com, the website returned unusual and incorrect credentials. This can happen if an attacker tries to impersonate the identity of mail.google.com or if a Wi-Fi login screen interrupts the connection. Your information is still protected, as Google Chrome stopped the connection before data was exchanged.

You cannot access mail.google.com at this time because the website uses HSTS. Attacks and network errors are usually temporary, so this page is likely to work later.
Cancel
Vote Up 0 Vote Down

Cancel
0 MasterRoshi over 4 years ago in reply to Ruflex

Firefox uses its own repository for certificates by default. Chrome/IE/Edge use the windows repository.

Can you check inside MMC -> Certificates (Snap-in) -> Trusted Root Certification Authorities -> Certificates and visually see the CA is there?
Cancel
Vote Up 0 Vote Down

Cancel