topic Re: ssl decryption certificate in General Topics

ssl decryption certificate

Satish — Sun, 27 Jul 2014 16:41:16 GMT

HI FRIENDS,

Now days i am facing a challenge ssl decryption certificate. i have a create a ssl decryption policy for block few App -ID after SSL decryption we got certificate error client side any suggestion???

Regards

Satish

Re: ssl decryption certificate

hshah — Sun, 27 Jul 2014 17:30:09 GMT

Please install certificate used for decryption on end users machine.

Add it to trusted root certificate list. Let me know if you need detailed instructions.

Re: ssl decryption certificate

HULK — Sun, 27 Jul 2014 17:33:30 GMT

Hello Sathish,

Could you please confirm, if you are only getting a certificate warning or the web-page is not loading correctly. In case of a forward -proxy, if you use a self signed certificate, then it is expected. Because it will not match with existing certificate ring in web-page.

For example:

Secondly, there are a few applications which does not play well with decryption:

List of Applications Excluded from SSL Decryption

Please find below a reference DOC for SSL certificate: SSL Decryption Certificates

Hope this helps.

Thanks

Re: ssl decryption certificate

Satish — Sun, 27 Jul 2014 18:27:35 GMT

Thnks Dud...

Re: ssl decryption certificate

Satish — Sun, 27 Jul 2014 18:31:24 GMT

Hi Hardik,

Is this possible without decryption cert installation on end users machine. with help of FW.if yes the how.Thanks for reply.

Regards

Satish

Re: ssl decryption certificate

HULK — Sun, 27 Jul 2014 18:37:00 GMT

Hello Satish,

If you signed the certificate from a trusted CA i.e entrust, go-dady, then it will not throw any certificate warning. Else, you may push the certificate to the individual machine through a server ( in your network).

Thanks

Re: ssl decryption certificate

Satish — Sun, 27 Jul 2014 18:38:32 GMT

Hi Hulk Bro..

I have other issue. i am try to block gtalk, facebook, youtube help of app-id. if i have create ssl decryption policy then its working fine but cert issue only. then i have install the cert in client pc after cert issue has been resolve but i am not able to block youtube gtalk. plz suggest.

Regards

Satish

Re: ssl decryption certificate

HULK — Sun, 27 Jul 2014 18:48:50 GMT

This doc might help you to install the certificate into individual machines: How to Perform Client Certificate Install for SSL Decryption

As per my knowledge, google services will not play well with SSL decryption ( google chrome as a browser), hence, could you please try to access through a different browser ( mozilla, IE) and let us know the result.

Thanks