topic Re: https inspection drop in General Topics

https inspection drop

Hllrdm — Tue, 08 Aug 2023 09:49:48 GMT

We are having a problem connecting to government websites.
We have enabled https inspection exception for these sites.
Users use special software to connect to these sites.
The first log shows accept.
But there is a second log drops with the message "The probe sent to destination has encountered a general error ", "Dropping request as configured in engine settings of HTTPS Inspection".
Can you tell me what the problem might be?

Re: https inspection drop

G_W_Albrecht — Tue, 08 Aug 2023 10:00:37 GMT

Look at the https settings:

If it is on fail-close, the drop is not unexpected...

Re: https inspection drop

Hllrdm — Tue, 08 Aug 2023 10:10:33 GMT

And if we use fast accel for this connection, in that case drops will also be there?

Re: https inspection drop

G_W_Albrecht — Tue, 08 Aug 2023 10:22:07 GMT

Why the question - either the connection is https inspected or excluded from that. Acceleration should not make any difference afaik. Here, a probe is sent to the site that fails for some reason - used cipher not supported, SNI verification failed or else. I would do an exclusion for government websites as they should not contain malware and customer is connecting using special apps.