Web filter causes "Revocation" errors.

Hi,

Please post an expanded screenshot of the offending rule.

Thank you

Ian

Here you go.

Hi Greg,

that is a policy not a firewall rule. In your policy you appear to have advertisements https blocked.

Ian

Where in that previous photo did it say anything about https? This is the firewall rule, the top portion of this page is just a default Source: LAN/Any/Allthetime, Dest: WAN/Any/Any.

Ah there is a VERY hidden icon beside the red shield white x icon, for controlling to block/allow/warn https. I guess I can hit allow for that since I'm not going to be doing ssl filtering....since that requires installing a ssl cert on every single pc.

Hi Greg,

sounds like a plan to me.

Ian

I have bit defender installed on these systems. I've went ahead and installed the SSL via gpo on all the systems, and tested it. It causes the Bit Defender web filter to now do a certificate revocation listing the bit defender SSL as an issue. Sigh. Whereas if I remove the web filter, I never get any bit defender revocations. Wish I knew a way to get those two to play together.

Hi Greg,

is bit defender managed from a central site or is each installation unique?

Ian

managed via solarwinds n-able so centrally.

So, in theory you could add the Sophos CA to the bit defender remotely.

Ian

So, in theory you could add the Sophos CA to the bit defender remotely.

Ian

Unfortunately no, we don't have control over the CA BD uses.

Hi Greg,

so what you are saying is that BD is doing MiM searches and is competing with the XG MiM search. You could try importing the BD CA into the XG and use that instead.

Ian

Two solutions:

The better way:

Download the Bitdefender CA.  Upload it to Certificates / Certificate Authorities.  You are not using it as a scanning CA (you don't need private key), you just adding it as a CA that you trust.

The big hammer way:

Web / General Settings / Block invalid certificates.  Turn this off.  Note that this affect all invalid everywhere.