Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 1 subscriber
  • Views 3763 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

client is not able to connect when https scan is on

testdlp
Hi 
   I am new in astaro I am using ASG 8.0 . I have to use astaro gateway between client and server using https and certificate based authentication for
communication .but if I checked the SSl scan in web security.then client is not able to connect the server.
Can anybody resolve my problem

Thanks,


This thread was automatically locked due to age.
Parents
  • 0
    The way that the https scanning works is through a "man-in-the-middle" means.  When you try to access an https site, your session actually ends at the Astaro.  The Astaro then connects to the https site on your behalf, so that it can decrypt and scan the data.  Then it passes the received data back to your session.  As I said previously, some sites just won't be able to do this, which is why the exception and proxy bypass features are available.  

    I could potentially play with this a little if you could say exactly what this client/server app is.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply
  • 0
    The way that the https scanning works is through a "man-in-the-middle" means.  When you try to access an https site, your session actually ends at the Astaro.  The Astaro then connects to the https site on your behalf, so that it can decrypt and scan the data.  Then it passes the received data back to your session.  As I said previously, some sites just won't be able to do this, which is why the exception and proxy bypass features are available.  

    I could potentially play with this a little if you could say exactly what this client/server app is.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Children
No Data