This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS scanning Web Protection SSL error ERR_CERT_COMMON_NAME_INVALID

After Google has updated Chrome to 58.0.3029.81 , we now have problems accessing websites google, yahoo, bing when SSL decryption and safe search is enabled.

We are getting the error below:

Your connection is not private

Attackers might be trying to steal your information from www.bing.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID

Adding an HTTPS Decryption exception for search engines is a workaround.

Anyone has the same problem ?

This thread was automatically locked due to age.

Parents

0 lferrara over 8 years ago

Lukasz,

I guess a new MR or a small fix will come out soon. On UTM side, a fix has been implemented.

https://community.sophos.com/products/unified-threat-management/b/utm-blog/posts/utm-up2date-9-413-released

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 lukg over 8 years ago in reply to lferrara

The same problem is with https://twitter.com
Cancel
Vote Up 0 Vote Down

Cancel
0 lukg over 8 years ago in reply to lukg

This issue has been identified with BUG: NC-18613 for Sophos XG firewall
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lukg over 8 years ago in reply to lukg

This issue has been identified with BUG: NC-18613 for Sophos XG firewall
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Aditya Patel over 8 years ago in reply to lukg

HI All,

I have posted a Workaround until the next release. This setting needs to be done on Command Prompt with Administrator rights.

https://www.chromium.org/administrators/policy-list-3#EnableCommonNameFallbackForLocalAnchors

Prior to making any changes on user system’s registry please take the back up of existing registry via below link.

https://support.microsoft.com/en-in/help/322756/how-to-back-up-and-restore-the-registry-in-windows

If admin is not able to find the specific location (i.e. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome) then he can take the backup of the entire folder; Here (HKEY_LOCAL_MACHINE).

Use below command in CMD (where CMD must be opened with ‘Run as administrator’ privilege) and enter the command:

“ reg add HKLM\Software\Policies\Google\Chrome /v EnableCommonNameFallbackForLocalAnchors /t REG_DWORD /d 1 ”

Please note that if local system is connected with Domain then there is a possibility that applied changes may be overridden with Domain policy.

So kindly verify this instance on a system, which must not be connected to domain, once its confirmed you can update the registry value via Domain through GPO Update policy.
Cancel
Vote Up 0 Vote Down

Cancel