05-10-2020 02:17 AM
I am encountering decrypt-err with Anydesk application after deploying SSL Decryption. In order to fix that, I am going to create a list of Public IPv4 that Anydesk use to excludes them from the decryption. Currently I collected an IPv4 list and want to create an EDL so I can simply add them to exclusion list. I have created and using Minemeld EDL for Office365 but it is dynamic list.
Could anyone please guide me how to create a custom EDL IPv4 list from a text file please?
05-11-2020 05:49 AM
Can you please give details on error that you are getting? if possible, please attach error snap. In my environment, I've generated self-signed certificate on PA and it is imported on windows server. Everything was smooth.
05-11-2020 08:00 AM - edited 05-11-2020 08:05 AM
I tried to generate self CA on PA as the following
Then I exported the generated self CA to a PEM file with a security key. Please note that since the ISS can only read the .pfx file and the PA can export CA in the file type PEM, DER, PKCS12 so I don't know which file type I should generate.
I imported the generated self CA to the ISS using import button in Server Certificate
Enter the password I have set at the export self CA step then I got the error
Could you please show me where I was wrong and share me how did you do it?
05-11-2020 11:05 AM
First of all, while generating certificate Common Name (CN) should be either IP address of server where your web page is configured or the FQDN you will be used for accessing webpage. Whatever you will put here that will appear on the certificate.
Once certificate is generated, export is as below file and put passphrase. Once exported, import file with same passphrase on your server. This should work for you.
Hope it helps!
05-11-2020 06:45 PM
Thanks for your guidance, Certificate between IIS and PA is done!
From the web browser in the LAN network I can access and see the IP content in the web URL I have configured in ISS.
On PA when I create a rule using the EDL from the IIS I got the message as below and cannot verify the content of the EDL as well
Do you have any idea please...
05-11-2020 11:03 PM
The issue is resolved!
Since the log is very clear, I change the URL to access a text file hosted by IIS, everything is good now. It seems for the EDL, PA communicates with the IIS the different way than Minemeld
Thank you for your help!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!