topic Re: list of exceptions for HTTPS inspection in General Topics

list of exceptions for HTTPS inspection

Wolfgang — Wed, 25 Nov 2020 15:05:32 GMT

Are there any updates for Several HTTPS web sites and applications might not work properly when HTTPS Inspection is enabled on Security Gateway

Last revision from 22 Nov 2018.

The new dynamic HTTPS inspection bypass objects includes only some well known services (Dropbox, Google,Adobe, Microsoft, Mozilla), that's not enough. Excluding with an application object like "GoToMeeting/GoToWebinar" does not work, this does not catch all needed URLs.

Do I have to collect all the needed destinations by myself or are there any additional lists available?

Wolfgang

Re: list of exceptions for HTTPS inspection

_Val_ — Wed, 25 Nov 2020 16:22:03 GMT

No, @Wolfgang, the latest revision was from 03-Nov-2020. It may not be visible to you though.

Re: list of exceptions for HTTPS inspection

Wolfgang — Wed, 25 Nov 2020 18:44:37 GMT

Thanks @_Val_ and nice to know that the list is updated with new findings.

This is what I can see in the revisions part:

Wolfgang

Re: list of exceptions for HTTPS inspection

PhoneBoy — Thu, 26 Nov 2020 03:41:44 GMT

Are they in the relevant Updatable Objects for R80.40/R81?

Re: list of exceptions for HTTPS inspection

Wolfgang — Thu, 26 Nov 2020 07:09:05 GMT

@PhoneBoy no Dameon not. The Updatable Objects for HTTPS inspection bypass includes only 5 services at the moment.

It would be nice to have all known destinations in this list.

Wolfgang

Re: list of exceptions for HTTPS inspection

PhoneBoy — Sun, 29 Nov 2020 17:59:43 GMT

@Meital_Natanson do we have any updates to this SK or the relevant updatable objects planned for additional HTTPS Inspection bypass destinations?

Re: list of exceptions for HTTPS inspection

doraskayo — Mon, 30 Nov 2020 19:31:44 GMT

@PhoneBoy, @Wolfgang, we're planning to review the list in sk112214 and add the relevant domains to the updatable object as well. Expect an update for the updatable object in the next few weeks.