web filter override chrome

[jonoarm]

Hi

I use the authenticate feature a lot on web filter categories. (Fortigate 60D firmware 5.2.10)

It works well in IE after I've done the following to stop the cert warnings http://kb.fortinet.com/kb/documentLink.do?externalID=FD37342

In chrome and firefox after clicking proceed on the authenticated website, the override logon page doesn't appear and i just get the connection is not private error i cannot proceed beyond the page. I believe it's all to do with browsers that support HSTS.   

I have the forti cert installed on the workstations. Is there any workaround ? If IE starts supporting HSTS then this feature will be useless.

Thanks in advance

Jon

[jonoarm]

It only seems to be newer versions of chrome with the issue. I found this on openDNS as a workaround were you can turn off cert errors in chrome. Probably not a good for security.

https://support.opendns.com/hc/en-us/articles/227989087-Chrome-for-Windows-only-HSTS-Certificate-Exc...

[tanr]

Have you installed certs directly into Firefox, since it manages certificates separately from the OS?

[erbsli]

Hi Jon

We have the same issue with the Fortigate 600D, firmware v5.4.2.

Did you find a solution (except disabling cert errors in Chrome)?

Or have you tried to open a case on the Fortinet Support?

Beste regards

Melanie