I having issues with SSL Scan and Decrypt. I would like to create an SSL Scanning exception for a number of sites but I can’t seem to get it working correctly.
I have created for example purposes the following exception for www.google.de
However when I activate it, I receive a Content Blocked message from my UTM. When I deactivate the exception rule I can access www.google.de without any problems.
Exception Activated
2017:05:24-17:48:16 astaro-1 httpproxy[6953]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.0.140.165" dstip="" user="kcronin" group="ITB_Internet" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_HttCffPvsEdv (ITB Internet)" size="3202" request="0xb4485e00" url="https://www.google.de/" referer="" error="" authtime="4" dnstime="0" cattime="92" avscantime="0" fullreqtime="205530" device="0" auth="3" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" exceptions="ssl,certcheck,certdate,cache"
Exception Deactivated
2017:05:24-17:49:41 astaro-1 httpproxy[6953]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.140.165" dstip="172.217.22.35" user="kcronin" group="ITB_Internet" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_HttCffPvsEdv (ITB Internet)" size="61917" request="0xb4866400" url="www.google.de/ referer="" error="" authtime="8" dnstime="5" cattime="218" avscantime="42696" fullreqtime="214161" device="0" auth="3" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" exceptions="" category="145" reputation="neutral" categoryname="Search Engines" content-type="text/html" application="google" app-id="182" sandbox="-"
Any ideas what I'm missing here
This thread was automatically locked due to age.