Results 1 to 2 of 2
  1. #1
    Newbie
    Join Date
    Mar 2013
    Posts
    10

    Default Android Studio Traffic Abandoned

    I have a user who wants to create phone apps (MS PowerApps is too limiting), so I installed Android Studio 3.6 by Google LLC on their computer. If you are familiar with Development Kits, you know that they pull data from websites constantly. They also have a free "workspace" so to speak called Firebase. This program uses SSL to communicate, but it is being blocked. I found info that says to allow *.google.com and *.android.com. I did that and still blocked. I looked at the SSL Report and saw a bunch of Abandoned sessions similar to this: ("ABANDONED Client SSL decrypt exception: Received fatal alert: certificate_unknown CERT: C63E93AB252B06112FF9D361FB2E8928912C2746") There are dozens of Server IPs that a lookup says belong to Google. I started multiple chat sessions with Untangle support and they were NOT supportive. Tried to blame my root certificate, so I sent a screenshot of thousands of sessions from that same computer NOT being Abandoned. Then they told me to move the Google Ignore rule to the top of all the other Ignore Rules (I have 70 Ignore rules and 1 Inspect All rule). That doesn't make sense to me. What I am missing here??

  2. #2
    Newbie
    Join Date
    Sep 2019
    Posts
    5

    Default

    Hi, I wish I was answering with a solution, but I am kinda jumping on the back of this.

    I have a two users who use a couple of apps, that generate the same issues. they both generate an error
    Sever Port - Rule ID - Status - Detail
    443 - 0 - ABANDONED- Client SSL decrypt exception: Received fatal alert: certificate_unknown CERT: 135A7549334653FCC2B4722255C2F0D612298551

    I have added the IP addresses and this gives a work around, but I know they will change and create the same issue in a few days / hours etc...

    So how can I add an exclusion to those certificates? I know that the those are from the sites I want to allow, but how can I add them to an exclusion list, rather than the IP Addresses.

    Is that the way to resolve this?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2