Access Microsoft CRLs through Webfilter

Question

Hello to all,

i just changed our proxy from TMG to UTM ( Standard Mode with AD SSO)
Everything is working fine for authenticated Users.

But i can see a lot blocked connections from computeraccounts which want to contact http://crl.microsoft.com/pki/crl.....

Via TMG there was a rule which allowed unauthenticated traffic.
How can i do this with UTM Webfilter?

A exception with "skiping authentication" does not work.

any ideas?

Thanks in advance

best regards
Stephan

This thread was automatically locked due to age.

HiRN · Answer

This should help, Web Proxy Exception, skipping:  Authentication / Antivirus / Extension blocking / URL Filter / Certificate Trust Check / Certificate Date Check  and Matching these URLs:	  ^https?://([A-Za-z0-9.-]*\.)?microsoft\.com/pki ^https?://([A-Za-z0-9.-]*\.)?ocsp\.entrust\.net ^https?://([A-Za-z0-9.-]*\.)?crl\.entrust\.net ^https?://([A-Za-z0-9.-]*\.)?ocsp\.usertrust\.com ^https?://([A-Za-z0-9.-]*\.)?crl\.usertrust\.com ^https?://([A-Za-z0-9.-]*\.)?crl\.microsoft\.com ^https?://([A-Za-z0-9.-]*\.)?ocsp\.comodoca\.com ^https?://([A-Za-z0-9.-]*\.)?crl\.comodoca\.com ^https?://([A-Za-z0-9.-]*\.)?ctldl\.windowsupdate\.com ^https?://([A-Za-z0-9.-]*\.)?crl\.verisign\.com