topic Re: Next Gen Firewall Public Wifi Browser Warning Issue in General Topics

Next Gen Firewall Public Wifi Browser Warning Issue

RMangotra — Tue, 15 Oct 2019 06:15:34 GMT

We have a policy for public wifi subnet set to

ACTION to NO DECRYPT,
Set TYPE=ssl-forward-proxy,
DECRYPTION PROFILE = NONE

When any public device (i.e laptop) try to open a HTTPS website that prohibited by our organization URL policy.

For example HTTPS’s porn sites.

The browser will come up with the Warning page

First page, IE = Website’s security certificate warning page with options to continue (or on Chrome advanced and proceed to continue); then after we click the Continue button
Second page, The organization URL POLICY PAGE BLOCKED

Is there any work around solution to avoid this First website security warning page that come up on a public device?

Thanks in advance

Kind Regards

Rohit.

Re: Next Gen Firewall Public Wifi Browser Warning Issue

VinceM — Tue, 15 Oct 2019 10:06:27 GMT

Hi,

When you say "First page, IE = Website’s security certificate warning page with options to continue (or on Chrome advanced and proceed to continue); then after we click the Continue button", where does this cert come from ??

Is it yours ?? If it's yours, mean you are decrypted then you don't match your "no-decrypt rule"

If not, mean someone else make decryption. Look in the cert.

Rgds

Re: Next Gen Firewall Public Wifi Browser Warning Issue

RMangotra — Tue, 15 Oct 2019 10:40:22 GMT

Hi Vince,

Thanks for your reply.

The IE browser is on PUBLIC LAPTOP connected to our PUBLIC WiFi Service and when the user clicks on 'CONTINUE' button on their IE browser then they are getting the error that I mentioned earlier.

Please let me know if you need more information.

Kind Regards

Rohit.