topic Re: SSL Decryption blocking the Google Drive Desktop in General Topics

SSL Decryption blocking the Google Drive Desktop

dvera-coe — Wed, 24 Feb 2021 19:10:22 GMT

Good afternoon,

We recently enabled SSL Decryption on our FW and seem to have broken our Google Drive Desktop. We can access Google Drive via web, but just can't access it via the Google Desktop file stream.

Anyone experiencing this?

Re: SSL Decryption blocking the Google Drive Desktop

BPry — Wed, 24 Feb 2021 20:36:06 GMT

@dvera-coe,

Yup, that would be expected for something like the Google Drive application or Dropbox as two examples. This is due to certificate pinning on the application itself, so when the certificate doesn't match what's expected the client just drops all traffic. You'll want to create a decryption exclusion to actually make the application itself work or force users to migrate to using the actual web interface. Depending on the severity of the files you are working with and your risk level acceptance, you could do either.

The exceptions that you'll want to make :

Google Drive for your PC/Mac

www.google.com:443/HTTPS
accounts.google.com:443/HTTPS
clients3.google.com:443/HTTPS
drive.google.com:443/HTTPS
www.googleapis.com:443/HTTPS
ssl.gstatic.com:443/HTTPS
*.docs.google.com:443/HTTPS
*.drive.google.com:443/HTTPS
*.googleusercontent.com:443/HTTPS

Re: SSL Decryption blocking the Google Drive Desktop

brucegarlock — Wed, 05 May 2021 11:37:01 GMT

Here's a KB that may help: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla6CAC