Skip to main content
paulbrock
New Member
December 23, 2014
Question

Chrome not prompting for authentication

Hi Everyone,

I am running Fortigate 800c 5.2.2

The problem i am facing is as follows.

I have a identity based policy , which of course forces non domain machines (macs ) to authenticate to have the internet. Windows machines are fine as i have fsso in place and it works fine.

the problem i have is when a mac comes to authenticate again after the timeout period if it is using safari a authentication box appears , they in turn authenticate and continue on. However if they are using chrome on the MAC they just get a certificate error and cant continue. the work around is to open safari authenticate and then chrome is fine.

I also notice that in the logs i see it is being blocked

so i guess to cut a long story short chrome is not prompting to authenticate thus i am getting blocked , which in turn gives me the certificate error, and  as i am using certificate based inspection, which if a page is blocked a certificate mismatch error occurs and if you procced you get the blocked page.

 

 

 

    3 replies

    jonoarm
    New Member
    February 19, 2015

    I get this too on chrome on a pc when you click proceed. Chrome gives you the Your connection is not private message. Authenticating with IE works fine. 

    Jeff_FTNT
    Staff
    Staff
    February 20, 2015

    FGT default use "self-sign" certificate for authentication, so some browser is not happy with it.

    You may change it either way and did not use "self-sign" certificate

     

    1.CLI:config sys global/set auth-cert xxx/end

    or

    2.CLI: config use setting /set auth-cert xxx/end

     

    Shawn_W
    New Member
    March 24, 2015

    Thanks for the info.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT