Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 2 answers
  • Subscribers 29 subscribers
  • Views 1263 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL\TLS Inspection

Bertie Mostert

Good Day All, 

I need some advice regarding SSL\TLS inspection. 

I have decided to open\allow access to Reddit. 

With the appliance certificate installed one is able to browse to Reddit and all subreddits with no issues from what I can see. 

 However, the Reddit app on android does not work at all. 

I'm running SFVH (SFOS 18.5.2 MR-2-Build380) - on vmware. 

As a side note, I'm very new to Sophos so maybe I'm missing something or misconfigured.

It's a very basic setup.



This thread was automatically locked due to age.
Parents
  • 0

    Hello!

    You cannot do TLS Decryption on Android devices without MDM. Even if you import the CA to the phone, only certain apps such as the chrome will respect It.

    This is an issue with the apps themselves, as the developer can do certificate pinning - prohibiting the app to use any available CA of the device.

    Since you're a home user, I recommend you to don't do TLS Decryption over your android device.

    Thanks!

    If a post solves your question use the 'Verify Answer' button.

    XG 115w Rev.3 8GB RAM v19.5 MR1 @ Home.

  • 0 in reply to Prism

    Interesting enough, even with MDM it seems not possible to do this. 

    As far as i understand, Google does not provide any kind of access to the System CA store. You only can access the user CA store, which is not trusted by a lot of applications. Therefore you cannot "force" the device to trust the SFOS CA, even with a MDM solution. 

    See: https://httptoolkit.tech/blog/android-11-trust-ca-certificates/

    __________________________________________________________________________________________________________________

Reply Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?