Next Gen Firewall Public Wifi Browser Warning Issue

[RMangotra]

We have a policy for public wifi subnet set to

• ACTION to NO DECRYPT,
• Set TYPE=ssl-forward-proxy, 
• DECRYPTION PROFILE = NONE

 When any public device (i.e laptop) try to open a HTTPS website that prohibited by our organization URL policy.

For example HTTPS’s porn sites.

The browser will come up with the Warning page

• First page, IE = Website’s security certificate warning page with options to continue (or on Chrome advanced and proceed to continue); then after we click the Continue button
• Second page, The organization URL POLICY PAGE BLOCKED

Is there any work around solution to avoid this First website security warning page that come up on a public device?

Thanks in advance

Kind Regards

Rohit.

[VinceM]

Hi,

When you say "First page, IE = Website’s security certificate warning page with options to continue (or on Chrome advanced and proceed to continue); then after we click the Continue button", where does this cert come from ??

Is it yours ?? If it's yours, mean you are decrypted then you don't match your "no-decrypt rule"

If not, mean someone else make decryption. Look in the cert.

Rgds

V.

[RMangotra]

Hi Vince,

Thanks for your reply.

The IE browser is on PUBLIC LAPTOP connected to our PUBLIC WiFi Service and when the user clicks on 'CONTINUE' button on their IE browser then they are getting the error that I mentioned earlier.

Please let me know if you need more information.

Kind Regards

Rohit.