topic Re: Problems with SSL-Decryption in General Topics

Problems with SSL-Decryption

ITSama — Tue, 29 Jul 2014 12:34:06 GMT

Hi,

since a few days, we have more and more websites, which we are unable to login. After further investigation i'm sure there's something wrong with SSL-decryption, if I exclude the IP from encryption the sites work. But formerly the problem doesn't exist and nothing changed. Could it be a problem with different TLS versions in the IE?

Re: Problems with SSL-Decryption

HULK — Tue, 29 Jul 2014 14:49:04 GMT

Hello ITSama,

Just for your reference, some applications are not playing well with SSL decryption. Here is the list of applications, that should be excluded from the decryption policy due their nature of operation: List of Applications Excluded from SSL Decryption

Thanks

Re: Problems with SSL-Decryption

hshah — Tue, 29 Jul 2014 16:36:57 GMT

Hi ITsama,

Would it be possible to share with us URL in question ?

If its not working with IE, please try with Chrome and mozilla. If it doesnt work with any of the browser than issue could be with general decryption.

Do you see any error in the browser?

Regards,

Hardik shah

Re: Problems with SSL-Decryption

ITSama — Wed, 30 Jul 2014 07:24:57 GMT

Hello Hulk,

thx for the "Exclude-List", that's good to know, but can you explain me how I can exclude a special application from the decryption-policy? I know how to exclude IP or URL categories, but not applications?

Regards

Re: Problems with SSL-Decryption

ITSama — Wed, 30 Jul 2014 07:31:21 GMT

Hi hshah,

the URL is www.dhl-geschaeftskundenportal.de.

I checked it now with a Firefox portable and it works with it, however now i found out that it also works on some other Clients with IE?

Regards

Re: Problems with SSL-Decryption

HULK — Wed, 30 Jul 2014 07:45:40 GMT

Hello ITsama,

That's the problem... the application will not be able to identify until you decrypt it. You must decrypt it in order to see what is inside. Hence, the "application" option is invalid in a Decryption policy.

Thanks