Problems with SSL-Decryption

[ITSama]

Hi,

since a few days, we have more and more websites, which we are unable to login. After further investigation i'm sure there's something wrong with SSL-decryption, if I exclude the IP from encryption the sites work. But formerly the problem doesn't exist and nothing changed. Could it be a problem with different TLS versions in the IE?

[HULK]

Hello ITSama,

Just for your reference, some applications are not playing well with SSL decryption. Here is the list of applications, that should be excluded from the decryption policy due their nature of operation: List of Applications Excluded from SSL Decryption

Thanks

[hshah]

Hi ITsama,

Would it be possible to share with us URL in question ?

If its not working with IE, please try with Chrome and mozilla. If it doesnt work with any of the browser than issue could be with general decryption.

Do you see any error in the browser?

Regards,

Hardik shah

[ITSama]

Hello Hulk,

thx for the "Exclude-List", that's good to know, but can you explain me how I can exclude a special application from the decryption-policy? I know how to exclude IP or URL categories, but not applications?

Regards

[ITSama]

Hi hshah,

the URL is www.dhl-geschaeftskundenportal.de.

I checked it now with a Firefox portable and it works with it, however now i found out that it also works on some other Clients with IE?

Regards

[HULK]

Hello ITsama,

That's the problem... the application will not be able to identify until you decrypt it.  You must decrypt it in order to see what is inside. Hence, the "application" option is invalid in a Decryption policy.

Thanks