Skip to main content
greg_wake
greg_wake
New Member
November 4, 2015
Question

WEB Filtering with Authentication broken for facebook. Certificate error.

  • November 4, 2015
  • 1 reply
  • 12694 views

Hi,

 

Hoping someone can help me out here.  I've found a couple of posts sort of similar but doesn't seem to resolve the issue for me.

 

Fortigate 90D, latest firmware 5.2.4

 

I've got various WEB Filters in place, combination of "Block" and "Authenticate".

 

Only recently, when I go to www.facebook.com, I get a certificate error.  IE does not allow me to continue on, nor does Chrome, but Chrome does provide more information as per the attached screenshot.

 

Turning off the web filtering restores access.

 

I've got facebook set to Authenticate so that certain staff can have access to this site.  I don't understand why this would stop working all of a sudden.  No issues with any other sites using https.

 

Any suggestions greatly appreciated.

 

Thanks

    1 reply

    Sylvia
    Sylvia
    Explorer
    November 4, 2015

    This is HSTS...

     

    With HSTS, Chrome, Firefox and updated IE are realizing that the Fortigate is doing SSL deep inspection and therefore a different CA certificate is used (than the one on the preload list for HSTS).

     

    Is it possible that the IE has been updated recently?

     

    Regards,

    Sylvia

    greg_wake
    greg_wakeAuthor
    New Member
    November 5, 2015

    Thanks Sylvia.

     

    The only update that would have been done is via Automatic Updates.  

     

    How can the error be avoided?  I've got several filters in place for sites that require authentication and changing the web filtering to "flow based" breaks this ability.

     

    The same issue applies to Chrome as well.

    aairey
    aairey
    New Member
    December 3, 2015

    Any news here?

     

    I'm facing the issue too.

    Terms & ConditionsAccessibility statement