This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

All Sites have "Strike-through" on HTTPS with Decrypt and Scan

Hello!

We are have a huge issue at all clients using SSL scanning. All of a sudden in Firefox and Chrome all websites that are not excluded from SSL scanning have the https "strike-through" showing. We are using the generated SHA-1 cert for the Signing CA cert.

Could this be the cause of the problem?? Why is Sophos still using SHA-1 certs for the Signing CA? [[:(]] [[:(]]

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

See https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46859 and https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46842

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 stephennix over 9 years ago in reply to Scott_Klassen

See https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46859 and https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46842

Thanks Scott, however the first link you sent is for a different issue which I have worked through already the majority of today. I found that the fixes only fixed what the OP describes as a problem (which I found that I was having as well), but not exactly the same as the problem that I am having at the moment.

The second link looks like it is about Chrome not even using the Proxy CA. My problem is that it is using the Proxy CA correctly, however Chrome is flagging it as a "red" cert.
Cancel
Vote Up 0 Vote Down

Cancel
0 AmigoHD over 9 years ago

have a look:
https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46789

it is because the web proxy does only offer sha1 hash and - by the way - only offers tls1.1.
i have the same problem. it's sophos who needs to fix this. enable more advanced sha and cipher suites for its https proxy.
Cancel
Vote Up 0 Vote Down

Cancel