topic Re: GP on Android 9, SSL decryption and exclude local private network problem. in GlobalProtect Discussions

GP on Android 9, SSL decryption and exclude local private network problem.

hmcadmin — Wed, 08 Apr 2020 13:20:41 GMT

Hello,

i have been messing about with GP in combination with Android 9. I've imported the certificate setup the right decryption rules and exclusions etc. and things seem to working. When i check the certificate using Chrome i can confirm it is using ssl decryption i also see the traffic on our firewall. Onfortunately a lot of application are not working. I've got the google play store excluded from ssl decryption already and that seems to be working fine, but still a lot of applications are not ok with the ssl decryption so it seems. My Ssl decryption setup using a laptop is working fine btw.

Is this normal on androids? is android working with more cert stores ? there something i can do to make this work without excluding all these applications?

Another thing i came across is that the network exclusion for my local private network is not working, i see the request coming in on the firewall. When testing this config on my laptop win 10, it is working... is this by design?

thanks guys.

regards, Lennart

Re: GP on Android 9, SSL decryption and exclude local private network problem.

BPry — Wed, 08 Apr 2020 15:08:49 GMT

@hmcadmin,

This is to be expected. A lot of Android applications will use their own certificate store for validation, so a lot of applications will break if not properly excluded. You just have to kind of deal with these as they come up.

Re: GP on Android 9, SSL decryption and exclude local private network problem.

vathreya — Wed, 08 Apr 2020 18:11:09 GMT

Hi hmcadmin,

Android does not support exclude access route split tunneling.

Regards,

Varun