palo alto decryption adobe flash player connection error

SShnap — Wed, 10 Oct 2018 17:11:09 GMT

Few months ago I start doing SSL decryption testing on few users,

One of the issue that I have which I didn't find any answer is Adobe flash player, I excluded the site https://get.adobe.com from decryption but still after downloading the flash player exe upadte file I get "connection error" from the installation.

On the logs I don't see any error the end sessions reasons are tcp-fin and sometimes aged-out which I'm not sure if it has connection becuase the dst. IP are not from adobe sites.

And what are you doing with other clients that installed on end points and tries to communicate outside the ssl decryption is breaking the connection because the client doesn't like the interfere or timeouts.

thank you for the help.

Re: palo alto decryption adobe flash player connection error

BPry — Wed, 10 Oct 2018 18:57:12 GMT

@SShnap,

I make an exception for *.adobe.com because of this issue; but you could create a "log-all" URL-Filtering profile and attach that to a test machine and a test policy and see what URLs are actively being hit when you attempt this communication if you want to not utilize a wildcard.

topic Re: palo alto decryption adobe flash player connection error in General Topics

palo alto decryption adobe flash player connection error

Re: palo alto decryption adobe flash player connection error