topic Re: Allow redirect URL with decrytion on. in General Topics

Allow redirect URL with decrytion on.

FarhanKoujalgi — Fri, 24 Sep 2021 15:56:16 GMT

Hey guys one of my customer I not able to access the Redirecting URL's This Error display (err_http2_inadequate_transport_security)

I checked the logs the traffic URL shows alert but the decryption is done.

We are able to Access the URL without decryption.

Created a specific decryption policy in which it enables the Strip ALPN. and we are able to access the URL decrypted.

The customer wants to send the traffic decrypted.

It's safe to enable the Strip ALPN and access the Redirecting URL or It compromises the Network Security. please share the severity if we enable the strip alpn.

Re: Allow redirect URL with decrytion on.

BPry — Sun, 26 Sep 2021 03:28:38 GMT

@FarhanKoujalgi,

Some resources serving HTTP/2 traffic you simply can't decrypt properly, so what Strip ALPN does is essentially downgrade the connection to HTTP/1.1 by forcing the client and server to think it can't form a HTTP/2 connection. This practice is perfectly fine and is even required under certain situations when using certain features.

Re: Allow redirect URL with decrytion on.

FarhanKoujalgi — Sun, 26 Sep 2021 13:12:32 GMT

Hey @BPry thanks for replying i am also want to know

is there any other solution for redirect URL suppose the URL starts like example: https;//paloalto/3e324/3424/reyre23/googledrive

Is it possible to Access this kind of URL without enable the strip alpn. and with decryption Enable.

The above is just for an example.