topic https inspection not inspecting cloud flare sites in Firewall and Security Management

https inspection not inspecting cloud flare sites

stefan_o — Fri, 28 Jan 2022 17:32:10 GMT

looking at site bike24.com gets not https inspected, but the policy says it should be inspected. The site uses cloudflare.

Funny thing is, some assets are coming from domain bike24.net, which are inspected.

Has anyone else this behaviour?

Re: https inspection not inspecting cloud flare sites

the_rock — Fri, 28 Jan 2022 18:26:46 GMT

I just tested it and gets inspected. Did it ever work?

Re: https inspection not inspecting cloud flare sites

Chris_Atkinson — Fri, 28 Jan 2022 23:57:18 GMT

Which version are you using, also is your trusted CAs list up to date?

Re: https inspection not inspecting cloud flare sites

Dorit_Dor — Sat, 29 Jan 2022 05:40:39 GMT

We have identified an SSL inspection bug just this week (with help of a customer) where the ssl probe of such sites was rejected (specifically with cloudflare). So ever since the probe introduction (R80.40 and in some cases even earlier), you may see an issue.

Therefore, if you run ssl inspection probe and it gets rejected, please contact our support for fix. We will include it obviously in future jumbo’s but the finding is still very new.

Dorit

Re: https inspection not inspecting cloud flare sites

Chris_Atkinson — Sat, 29 Jan 2022 11:33:39 GMT

Thanks Dorit, that's good to know!

Re: https inspection not inspecting cloud flare sites

the_rock — Sat, 29 Jan 2022 13:48:40 GMT

Thats definitely good to know.