GSuite apps not decrypted when using Chrome

TroyGamm — Wed, 28 Sep 2022 21:19:00 GMT

I have seen some older posts with no updates on this very subject so I thought I would start a new thread. I am testing SSL decryption from a couple of workstations and have almost all of the traffic being successfully decrypted. We are a Google suite user with it being our email provider with our own domain. I am on a mac and when using Chrome to access any of the GSuite apps, it is not being decrypted. The cert is showing up as a standard Google Trust Services issued cert instead of my Palo Alto issued cert.

I have blocked all QUIC traffic at the firewall per the Palo Alto published best practices. I have a security rule with any as the source, QUIC as the application and services as Application Default. Just to make sure something wasn't slipping past that rule I added another this morning blocking all udp traffic over 80 & 443 to no avail. The logs show tons of blocked QUIC traffic from my workstation. When I log into any of the GSuite apps from Safari, it is decrypted as expected.

Any suggestions?

Re: GSuite apps not decrypted when using Chrome

reaper — Wed, 09 Nov 2022 14:25:12 GMT

Have you checked the Decryption log (monitor > Logs > Decryption) to see if it's being bypassed or failing?

topic Re: GSuite apps not decrypted when using Chrome in General Topics

GSuite apps not decrypted when using Chrome

Re: GSuite apps not decrypted when using Chrome