inspection certificate issue

[unknown1020]

friends good day, one question:
In our main office we have a firewall with version 7.2.5, in this office there are problems accessing a page because when trying to access the certificate message appears:
"the connection is not private

It is possible that attackers are trying to steal your information from xxxxx.com
(for example, passwords, messages or credit cards).

NET::ERR_CERT_AUTHORITY_INVALID"

To fix this issue, a policy was created for that page and the no-inspect profile was applied.
However, when the user enters the page at the top, the message "not secure" appears. Is there a way to remove that message?

 

Since in our branch we have a 7.0.12 firewall, in which there is the same problem of access to the page. The same solution was applied, that is, the access policy was created for that page and the no inspection profile was enabled. However, when trying to access the same page, the message "not secure" does not appear at the top.

My question is, why does the user who is in the main office get that message on top and the other user who is in the branch doesn't get that message?

[abarushka]

Hello,

You may expect such message in case deep inspection is performed or traffic is blocked and replacement message is generated while CA certificate is not imported.

You may consider to check in browser/traffic sniffer whether there is redirection or traffic is blocked and replacement message is generated.

[unknown1020]

but because if the configuration was made in both offices, in one office when accessing the page you get that "not secure" message and in the other office it does not appear.

[rickyfgt]

Double-check all inspections you are doing on those interfaces (Check policies) any Security profiles could be causing this for sure. Easy testing will be to disable the ones you have enabled and test. Clear your browser cache. Especially DNS Filter or Web Filter, as well as SSL Inspection

[Sheikh]

Hello @unknown1020,

Which certificate is presented to the users, you can check the certificate that will give you an idea that which firewall or a server is presenting this certificate to users. Please ensure that CA certificate, which signs the server certificate is installed in the local certificate store of client machine. Microsoft Edge & chrome use built-in Windows store while Firefox has it's own certificate store, so incase of Firefox, please ensure that CA certificate is added in the browser's store.

regards,

Sheikh