GotoMeeting with Outbound SSL decryption

[jmad328is]

Hi all,

I'm testing out the SSL forward proxy feature of the PAN and the only issue I have is that gotomeeting doesn't work.

I configured it with the guide from the website here and made the two rules one which says don't inspect banking/medical etc. followed by the decrypt all rule.  I cant figure out how to tell the PAN to not try and decrypt this particular site.  According to the brightcloud page it falls within "Computer and internet info" and "Business and Economy" categories.  I dont want to not decrypt everything in that category "Business and economy" so I dont know how to fix this this issue.

And the problem with creating a custom category is that I have no idea what the URL or IP addresses are that it uses to do its thing.

Does anyone know how to get it working?

Thanks!

Justin

[kadak]

Hello,

Go-to-meeting is listed as one of the applications in the decryption exclude list.

Please refer to the following documents:

List of Applications Excluded from SSL Decryption

Hope that helps!

Regards,

Kunal Adak

[jteetsel · Accepted solution]

Hi Justin, I believe gotomeeting should be excluded from ssl decrypt by default via the exclude cache. Are you sure the GTM session is actually getting decrypted? You can tell using 'show session all filter source <source IP> ssl-decrypt yes'

This will show you all decrypted sessions for the source host.

If you want to exclude something from ssl decrypt but you don't want to use destination IP or url category you can use the SSL Exclude Certificate. You need to confirm and obtain the ssl cert that the application\site uses, import that cert into the PAN then check the "SSL Exclude Certificate" box for the cert. This should exclude anything that uses that cert. Let me know if you have any questions.

John

[jmad328is]

Hey John,

It looks like it is being decrypted and it is part of the "computer-and-internet-info" URL category.  I am currently not decrypting that category because gotomeeting doesnt work with it on.

Is this a bug?  I'm not sure what else is in that category but the goal is to decrypt everything that doesn't include some sort of personal info.

Heres a couple screenshots

[jteetsel]

That is correct, GotoMeeting is excluded from ssl decryption as it is not supported at this time.