Results 1 to 5 of 5
  1. #1
    Untangler atomicboy's Avatar
    Join Date
    May 2019
    Posts
    43

    Default SSL Inspector Blocks Google

    I have turned on SSL Inspector and although I can access a web site if I type in the URL, I cannot search using Google because I get a TLS error. I cannot push through the certificate.
    The rule set is set to inspect only, however I get this error. If I uncheck Google in the inspection rule set I have no issues.
    I did find a very long 8 page posting (2020) talking of this in the forum but my use case does not match what I believe the issue was for that posting which seemed to be how to use wildcard characters.
    Currently I run SSL Inspector bypassing Google.

    I am running Untangle 16.2.0 and I am able to replicate this behaviour on an IPad Pro, Mac Book Pro and a Win 10 PC.

    Any thoughts on this would be appreciated.
    Thanks in advance.

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    9,475

    Default

    Google has implemented anti-MITM features so SSL inspection is not possible.

    https://forums.untangle.com/networki...tml#post230922
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untangler atomicboy's Avatar
    Join Date
    May 2019
    Posts
    43

    Default

    Thanks for the quick response and informative answer.
    I did not find this posting when I searched the forums.

  4. #4
    Untanglit
    Join Date
    Nov 2019
    Posts
    17

    Default

    Would it be possible if Untangle would implement something like this:

    https://docs.fortinet.com/document/f...ic-key-pinning
    atomicboy likes this.

  5. #5
    Master Untangler
    Join Date
    Aug 2016
    Posts
    234

    Default

    All my kids ended up getting Chrome books for the school year.

    I had to turn off SSL inspection to get them to work.

    With that being said, I do find the Web Filter still does a good job.

    It does make life easier as I don't have to deploy the cert to each and every device.
    Untangle 16.2.0 (Build: 16.2.0.20201222) (Kernel: 4.19.0-11-untangle-amd64)
    QOTOM-Q355G4
    1.6-2.7 GHz Intel I5 5250U, 128GB SSD mSATA, 8GB RAM DDR3L, 4xRJ-45 Intel I211AT 10/100/1000 Controller

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2