topic Re: GOOGLE SERVICES ARE NOT DECRYPTED WHEN ACCESSED FROM CHROME AND FIREFOX in General Topics

GOOGLE SERVICES ARE NOT DECRYPTED WHEN ACCESSED FROM CHROME AND FIREFOX

BraveTiger — Tue, 14 Apr 2020 10:09:33 GMT

SSL Decrypt is configured for all Google Services.
But when using the Chrome or firefox to launch any services provided by Google, the decryption doesn't work. and tried with blocking quic protocol nothing is working

Re: GOOGLE SERVICES ARE NOT DECRYPTED WHEN ACCESSED FROM CHROME AND FIREFOX

reaper — Tue, 14 Apr 2020 12:31:55 GMT

Hi @BraveTiger

Would you mind not putting your title in all caps? It's kinda shouty 😛

How is your decryption set up, only for google services? Are you not decrypting ssl?

How is your decryption profile set up, to block or ignore certificate issues

How are you asserting decryption doesn't work?

Re: GOOGLE SERVICES ARE NOT DECRYPTED WHEN ACCESSED FROM CHROME AND FIREFOX

BraveTiger — Wed, 15 Apr 2020 13:41:21 GMT

Thanks for suggestion i will not put title in Capital from now

I configured decryption policy from any to any and any services except Financial, drug and helth. When I browse from interInt explorer All google services work properly (Gmail, Drive,google search engine, Youtube etc)but when I browes from chrome or firefox i am facing issue for same services .All other website other than google are reachable even i blok quic protocol so that google will use SSL.

Re: GOOGLE SERVICES ARE NOT DECRYPTED WHEN ACCESSED FROM CHROME AND FIREFOX

BraveTiger — Wed, 15 Apr 2020 14:00:27 GMT

@reaper

My polivp are

Trust any ------ untrust any------ Finances ----- do not decrypt

Trust any------ Unstrust any------ any url and services----- To decrypt

Security policy

Untrust any --- Trust any -- quic -- any service -- block

Trust any--Unstrust any--- any--- any ----- allow

Re: GOOGLE SERVICES ARE NOT DECRYPTED WHEN ACCESSED FROM CHROME AND FIREFOX

nextgenhappines — Wed, 15 Apr 2020 18:44:07 GMT

try change security policy rule 1 from untrust to trust TO from trust to untrust

Re: GOOGLE SERVICES ARE NOT DECRYPTED WHEN ACCESSED FROM CHROME AND FIREFOX

reaper — Wed, 15 Apr 2020 21:38:16 GMT

@nextgenhappines wrote:
try change security policy rule 1 from untrust to trust TO from trust to untrust

this will help block quic

also check your traffic log and add this filter to your (addr.src in x.x.x.x) and (flags has proxy)