Allowed SSL traffic reporting as policy-deny

[tejasmapuskar]

We have a decryption rule to allow user internet access over SSL. Access to LinkedIn was working until 2 days back we started getting certificate error with validity expired. All users accessing the internet use the same CA signed certificate with no issues. I have attached the logs showing access permitted but the  session end reason is policy-deny.

[Raido_Rattameister]

Check Decryption logs from that source to that destination and you will find the answer.

[tejasmapuskar · Accepted solution]

Hi,

Thanks for looking into it. The issue was fixed after renewing the expired Digicert issue on the firewall.