Web Protection: Web Filtering & Application Visibility/Control Get rid of Cert Warning for https error pages

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 2 subscribers
Views 1469 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Get rid of Cert Warning for https error pages

SvenSchuchmann over 5 years ago

Hi,

if someone for example opens: https://www.asdadasdasdasdasd.org/

I get the following warning in my browser (firefox):

The cert looks like this:

so the browser complains correctly. If clicking "accept risk and continue" the I get:

Which is correct.

How do I get rid of the warning?

cu SveN

This thread was automatically locked due to age.

0 BAlfson over 5 years ago

Hallo Sven,

Is this perhaps a site that your organization hosts and uses Webserver Protection? My guess is that the Virtual Server definition needs a different certificate and that the Real Server sends the traffic to a box that is not running. ????

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 SvenSchuchmann over 5 years ago in reply to BAlfson

Hallo Bob,

the site is not hosted by us, it is just a site which does not exist.
So you could also test with https://www.asdadas1dasdasdasd.org/

The Thing is that the proxy of the UTM should deliver the "Host not found" page,
but if I want to view this host-not-found-page of the proxy I get certification warning..

cu SveN
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to SvenSchuchmann

Ah, I was making that too complicated for myself, Sven.

Do you have the Proxy CA downloaded into your browser? 'Filtering Options' 'HTTP CAs' tab.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 SvenSchuchmann over 5 years ago in reply to BAlfson

Hello Bob,

yes, I installed these certificates locally.

As I said: The Browser complains about the incorrect domain name
in the cert that the proxy delivers. The Browser URL is www.aaaaaaaaaaaaaaa.org
and the domain name in the cert is www.aaaaaaaaaaaaaaa.org.schleissheimer.de

So I think this is per design wrong in the UTM?

Best Regards,

Sven
Cancel
Vote Up 0 Vote Down

Cancel