topic Re: Issues with SSL Inspection in General Topics

Issues with SSL Inspection

MMCiobanu — Tue, 06 Oct 2015 23:00:01 GMT

Hi,

I am having this weird issue where an application breaks because of SSL inspection. I have made an exclusion based on the certificate:

ssl-exclude-cert [ login.salesforce.com *.salesforce.com ];

However, the firewall still decrypts the traffic, and it looks like it does when a different application is detected:

This traffic is generated by the same user application and uses the same certificate.

Has anybody else experienced this and was able to figure out how to solve it?

Thank you.

Re: Issues with SSL Inspection

pankaku — Wed, 07 Oct 2015 04:08:31 GMT

add these url to exclude list

www.salesforce.com/

*.salesforce.com/

Re: Issues with SSL Inspection

MMCiobanu — Fri, 16 Oct 2015 17:27:13 GMT

unfortunately, this still did not solve the issue. The user would have to try multiple times to log in to be succesful and it still looks like the firewall is inspecting traffic, despite the exclusions.

Re: Issues with SSL Inspection

Raido_Rattameister — Fri, 16 Oct 2015 17:45:11 GMT

Can you post screenshot of your no-decrypt policy?

Re: Issues with SSL Inspection

MMCiobanu — Fri, 16 Oct 2015 22:00:18 GMT

please see below:

Thank you.

Re: Issues with SSL Inspection

Raido_Rattameister — Fri, 16 Oct 2015 22:41:05 GMT

And this no-decrypt policy is top one?

Go to Monitor > URL Filtering

Use following filter

( url contains salesforce )

Add column "Decrypted"

You can remove source user fields.

And take screenshot of that.

Re: Issues with SSL Inspection

Raido_Rattameister — Fri, 16 Oct 2015 23:10:50 GMT

Also try to remove ending / from URL's in safelist.

Never mind. Tested and worked both ways - with / and without.