SSL Decryption blocking the Google Drive Desktop

[dvera-coe]

Good afternoon, 

We recently enabled SSL Decryption on our FW and seem to have broken our Google Drive Desktop. We can access Google Drive via web, but just can't access it via the Google Desktop file stream. 

Anyone experiencing this? 

[BPry]

@dvera-coe,

Yup, that would be expected for something like the Google Drive application or Dropbox as two examples. This is due to certificate pinning on the application itself, so when the certificate doesn't match what's expected the client just drops all traffic. You'll want to create a decryption exclusion to actually make the application itself work or force users to migrate to using the actual web interface. Depending on the severity of the files you are working with and your risk level acceptance, you could do either. 

The exceptions that you'll want to make :

Google Drive for your PC/Mac

• www.google.com:443/HTTPS
• accounts.google.com:443/HTTPS
• clients3.google.com:443/HTTPS
• drive.google.com:443/HTTPS
• www.googleapis.com:443/HTTPS
• ssl.gstatic.com:443/HTTPS
• *.docs.google.com:443/HTTPS
• *.drive.google.com:443/HTTPS
• *.googleusercontent.com:443/HTTPS

[brucegarlock]

Here's a KB that may help:  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla6CAC