topic Re: URL Filtering in Vwire SSL Trust Question in General Topics

URL Filtering in Vwire SSL Trust Question

bparker — Thu, 03 Oct 2013 13:33:33 GMT

Hi,

I have a customer who is currently only running the PA in vwire. They need to have custom URL filtering continue and override pages.

My question is what needs to be done to have the end users browsers trust the certificate in vwire?

I know in layer 3 mode I can use a pushed out trusted root certificate going to a L3 interface. Based on my testing, in vwire mode I need to use transparent filtering but even if I do that and create a wildcard certificate it doesn't trust the certificate, I think because it is going directly to IP address not a dns address. Any insights or being pointed in the right direction would be appreciated.

Thanks,

Re: URL Filtering in Vwire SSL Trust Question

bparker — Thu, 14 Nov 2013 15:13:28 GMT

The URL filtering override pages work like the Captive Portal pages. The answer to the orginal question was there needs to be a layer 3 interface of some type on the device for it to use for the certificates. This can be accomplished with a loop-back interface or a regular layer 3 interface. Otherwise in transparent mode you will receive certificate errors on the clients.

Re: URL Filtering in Vwire SSL Trust Question

VinceM — Fri, 15 Nov 2013 10:42:13 GMT

Hi,

Maybe you can use the mangement interface for that.

Hope help