Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 2233 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS Decrypt and Scan -- errors

dmitripr
Hi guys,

I've decided to try and play with HTTPS Decrypt and Scan setting on my web proxy. And it started breaking some of the sites for me. I'm seeing a lot of errors in the logs, similar to below: 


2015:09:01-16:31:48 localdomain httpproxy[5856]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe1d7a800" function="ssl_connect" file="ssl.c" line="1444" message="ssl_handshake: Connection reset by peer"

2015:09:01-16:34:07 localdomain httpproxy[5856]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x99c1800" function="ssl_connect" file="ssl.c" line="1444" message="ssl_handshake: Connection reset by peer"

2015:09:01-16:32:12 localdomain httpproxy[5856]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="read_request_headers" file="request.c" line="1571" message="Read error on the http handler 115 (Input/output error)"


Am I missing something in the settings somewhere? I was able to detect some sites that cause the issue and add them to exception list to fix. But in some cases, it's not even clear which site is the culprit. 

Any best practices for this? 

Thanks a lot!


This thread was automatically locked due to age.
  • 0
    I normally make an SSL scanning and Certificate trust check Exception for the Finance/Banking, Health and Pharmacy categories.  Many of them can detect a man-in-the-middle and will refuse to play.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Thanks, Bob. It seems that it also breaks some applications on Android and iPhone (like Facebook). For now it became more of a hassle, I just decided to turn it off, until I have more time to play with it.
Unfiltered HTML