Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1202 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AWG Certificate invalid

astutillo
Hi,
I'm testing virtual appliance AWG 7.405 but I'm not be able to scan HTTPS traffic. In my content filtering log appears 
"2009:09:07-12:11:12 Astaro-CD httpproxy[3670]: [ 0x8272808] ssl_cert_read (ssl.c:122) certificate invalid, removing"
"2009:09:07-12:11:12 Astaro-CD httpproxy[3670]: [ 0x8272808] ssl_certcache_lookup (ssl.c:409) failed to read cert: Invalid argument"
"error="unable to get local issuer certificate""

I downloaded HTTPS CAs from Web Security tab and imported in my IE8.
After I blocked MSN (MSN connection is https) from webadmin but MSN opened without problem.

Can you help me?

Thanks


This thread was automatically locked due to age.
  • 0
    You definitely should ask this question of your reseller.

    When you say you blocked MSN, do you mean that you created an exception for it, that you added msn.com to your transparent mode skiplist or ???

    Have you imported the Porxy CA into your browser?  You can do that via the End User Portal or WebAdmin.  Pictures attached.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    I imported Proxy CA certificate from HTTPS CAs tab.
    I see Proxy CA certificate in my internet explorer.
    I haven't end user portal in my Astaro Web Gateway (virtual appliance). How can I enable it?
    I try to block MSN application from "IM/P2P --> Instant Messaging --> Protocols"

    Thanks