Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 3 subscribers
  • Views 7659 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to skip SSL Trust Check for all and any sites?

stealthmatt_01
Hi all,

I would like to make a URL exception to allow all and any sites to skip the Certificate Trust Check / Certificate Date Check

Would I just add the matching url as 

^https://([A-Za-z0-9.-]*\.)?*\.com\.au/ 
^https://([A-Za-z0-9.-]*\.)?*\.com/

or maybe

^https://*\.com/


Thank you


This thread was automatically locked due to age.
Parents
  • 0
    The reason why I ask is because of the poor HTTP transparent proxy that has been implemented that is blocking sites like microsoft activation sites. 

    https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/45936

    error="Failed to verify server certificate"

    co2.sls.microsoft.com - 65.52.98.231

    I can't add every single site that has an issue, some are banking sites some other microsoft sites. Most sites use many ip's and domains.

    This frustrates the user and causes more IT overhead than is needed.
  • 0 in reply to stealthmatt_01
    Well, if you're using the transparent proxy, then simply disable "Scan HTTPS traffic" and create an appropriate firewall rule...

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Reply
  • 0 in reply to stealthmatt_01
    Well, if you're using the transparent proxy, then simply disable "Scan HTTPS traffic" and create an appropriate firewall rule...

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Children
No Data
Cookie Information Banner