Skip to main content
FirstInfo
New Member
August 19, 2018
Question

HSTS Problem

  • August 19, 2018
  • 2 replies
  • 10255 views

Hi

 

I have a problem with my Web filter is not passing HSTS traffic on firefox.

 

How can i do this?

 

Best Regards

James

2 replies

emnoc
New Member
August 19, 2018

You need to explain more? is this  HTTPS problem?  ( no such thing as HSTS traffic btw )

 

next are you doing SSL inspection? Did you  try eliminating this site from SSL inspection, if yes did it work? Did you  flush the FF browser   HSTS cache?

 

Ken

 

Nicholas_Doropoulos
New Member
August 19, 2018

Hi,

 

Assuming you are already using deep inspection on Fortigate, you would first need to remove the stored HSTS flag on Firefox. Follow the instructions below and advise results:

 

Open your current Firefox settings (AKA Firefox profile) folder using either

[ul]
  • "3-bar" menu button > "?" button > Troubleshooting Information
  • (menu bar) Help > Troubleshooting Information
  • type or paste about:support in the address bar and press Enter[/ul]

    In the first table on the page, click the "Open Directory" (or similar) button. This should launch a new window listing various files and folders in your file browser.

    Leaving that window open, switch back to Firefox and Exit/Quit, either:

    [ul]
  • "3-bar" menu button > "power" button
  • (menu bar) File > Exit / Quit[/ul]

    Pause while Firefox finishes its cleanup, then open SiteSecurityServiceState.txt in your preferred text editor and delete all lines for the hostname you need to access and save the file.

    When you start Firefox again, on your first visit, Firefox normally ignores the HSTS status because it hasn't gotten past the handshake.

  • Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!