SSL Inspection Error

Forum|Forum|10 years ago
August 4, 2016
4 replies
18455 views

We are using "SSL Certificate Inspection" to ensure that webfiltering works on https website. (Not Deep Inspection) Unfortunately, we appear to have run into an issue accessing the "https://angular.io" website that appears to be related the the SSL Certificate Inspection. When Chrome attempts to access this site, it displays the following error ERR_BAD_SSL_CLIENT_AUTH_CERT. I can't seems to find a way to exempt the SSL certificate inspection for this website without changing it over to Full SSL Inspection. Is there anyway to exempt this website when using "SSL Certificate Inspection" without changing it over to "Full SSL Inspection"?

emnoc

New Member

Qs:

Does other browsers give similar warnings?

have you tried a policy without ssl_inspection for just that site? What happens?

ddskierAuthor

New Member

Edge, IE, and Chrome all don't work.

Turning off SSL Inspection allows the website to load up.

MikePruett

New Member

We have had issues where we had to make a policy for certain sites that ignores it. Usually, the browser knows the cert doesn't match because it has been to the site before. Browsers are getting too smart for their own good.

mlohmiller

New Member

Getting similar actions as well.

Everything is working fine for a few weeks. Then the decryption engine just pukes for no reason. We all so have app control on inbound to our exchange server to block OWA and allow activesync. last night that stopped as well.

I am waiting for support on the phone now. Been on the phone for 25 minutes.

500D running 5.4.1

If anyone can add please do. I have had issues with decryption since we deployed last year running 5.2.3

Sign up

Login with SSO

Login to the community

Login with SSO