Access Microsoft CRLs through Webfilter

Question

Hello to all,

i just changed our proxy from TMG to UTM ( Standard Mode with AD SSO)
Everything is working fine for authenticated Users.

But i can see a lot blocked connections from computeraccounts which want to contact http://crl.microsoft.com/pki/crl.....

Via TMG there was a rule which allowed unauthenticated traffic.
How can i do this with UTM Webfilter?

A exception with "skiping authentication" does not work.

any ideas?

Thanks in advance

best regards
Stephan

This thread was automatically locked due to age.

HiRN · Answer

This should help, Web Proxy Exception, skipping:

Authentication / Antivirus / Extension blocking / URL Filter / Certificate Trust Check / Certificate Date Check

and Matching these URLs:

^https?://([A-Za-z0-9.-]*\.)?microsoft\.com/pki
^https?://([A-Za-z0-9.-]*\.)?ocsp\.entrust\.net
^https?://([A-Za-z0-9.-]*\.)?crl\.entrust\.net
^https?://([A-Za-z0-9.-]*\.)?ocsp\.usertrust\.com
^https?://([A-Za-z0-9.-]*\.)?crl\.usertrust\.com
^https?://([A-Za-z0-9.-]*\.)?crl\.microsoft\.com
^https?://([A-Za-z0-9.-]*\.)?ocsp\.comodoca\.com
^https?://([A-Za-z0-9.-]*\.)?crl\.comodoca\.com
^https?://([A-Za-z0-9.-]*\.)?ctldl\.windowsupdate\.com
^https?://([A-Za-z0-9.-]*\.)?crl\.verisign\.com