Wrong SSL cert being presented externally

Farzana — Tue, 03 Oct 2017 02:53:15 GMT

Hi,

Somehow, when browsing to one of our sites from outside our network, an incorrect certificate is being presented.

When browsing internally, the correct cert is presented (wildcard certificate from Godaddy).

I’ve excluded the server from our web proxy entirely, no change.

I’ve checked that our site is not being cached behind Cloudflare.

On the FW, no decryption appears to be applied to the access policy.

Anyone faced this issue? I would like to know how an internal certificate can be presented externally.

Re: Wrong SSL cert being presented externally

Raido_Rattameister — Tue, 03 Oct 2017 03:00:36 GMT

Do you use same URL to access it from inside and outside?

If website is behind Palo you can check traffic log if it was decypted.

You can also go to Monitor > Packet Capture and compare if certificate in receive state sent by webserver is same that Palo sends out in from tramsmit stage.

topic Wrong SSL cert being presented externally in General Topics

Wrong SSL cert being presented externally

Re: Wrong SSL cert being presented externally