topic Re: MAC OS Decryption Issues in General Topics

MAC OS Decryption Issues

CarmenGerardi — Thu, 22 Mar 2018 16:44:17 GMT

Hello All,

I was just curious if anyone has encountered issues with Apple Mac devices and SSL decryption? We have users that are unable to perform an Internet Recovery over the network, but when they are off the network it works for them. This has only started since implenting SSL Decryption. We have excluded apple.com from SSL inspection but the issue still persists. Just curious if anyone has any ideas on other things to exclude?

Thank you!

Re: MAC OS Decryption Issues

Raido_Rattameister — Thu, 22 Mar 2018 17:03:12 GMT

No experience but in addition to apple.com also exclude *.apple.com

If it still fails then exclude decryption for specific IP that is performing Internet Recovery and check logs where it connected to.

Re: MAC OS Decryption Issues

CarmenGerardi — Thu, 22 Mar 2018 17:06:42 GMT

Thank you for responding. We do have apple.comand *.apple.com but still not luck. I checked the logs and do not see any decryption errors. Saw a couple tcp-rst-from-client's in there but nothing really stands out.

Re: MAC OS Decryption Issues

Mick_Ball — Thu, 22 Mar 2018 17:07:16 GMT

have you tried adding *.apple.com to your no decrypt policy.

i do not use it but am aware that it uses :-

osrecovery.apple.com or oscdn.apple.com

so... I would have

apple.com and *.apple.com in your no-decrypt policy

Re: MAC OS Decryption Issues

Mick_Ball — Thu, 22 Mar 2018 17:08:04 GMT

oops... sorry late post...

Re: MAC OS Decryption Issues

Raido_Rattameister — Thu, 22 Mar 2018 17:08:52 GMT

Then I suggest to exclude this machine from decryption.

Run recovery.

Run report from Monitor > PDF Reports > User Activity Report to get whole connection pattern.