HSTS Problem

[FirstInfo]

Hi

I have a problem with my Web filter is not passing HSTS traffic on firefox.

How can i do this?

Best Regards

James

[emnoc]

You need to explain more? is this  HTTPS problem?  ( no such thing as HSTS traffic btw )

next are you doing SSL inspection? Did you  try eliminating this site from SSL inspection, if yes did it work? Did you  flush the FF browser   HSTS cache?

Ken

[Nicholas_Doropoulos]

Hi,

Assuming you are already using deep inspection on Fortigate, you would first need to remove the stored HSTS flag on Firefox. Follow the instructions below and advise results:

Open your current Firefox settings (AKA Firefox profile) folder using either

[ul]

"3-bar" menu button > "?" button > Troubleshooting Information

(menu bar) Help > Troubleshooting Information

type or paste about:support in the address bar and press Enter[/ul]

In the first table on the page, click the "Open Directory" (or similar) button. This should launch a new window listing various files and folders in your file browser.

Leaving that window open, switch back to Firefox and Exit/Quit, either:

[ul]

"3-bar" menu button > "power" button

(menu bar) File > Exit / Quit[/ul]

Pause while Firefox finishes its cleanup, then open SiteSecurityServiceState.txt in your preferred text editor and delete all lines for the hostname you need to access and save the file.

When you start Firefox again, on your first visit, Firefox normally ignores the HSTS status because it hasn't gotten past the handshake.