Internal SSL authentication error [ ckpSSL ssl lib error]

[lfcalves]

Hi guys!

When enabling HTTPS inspection and then applying a policy on a remote gateway, the following error is presented to me: "Installation failed. Reason: Internal SSl authentication SSL error [unknown]" when checking the Management SIC with the me gateway the following error is displayed: "Internal SSL authentication error [error ckpSSL ssl lib]". The manager is R80.30 and the gateway is R80.20 (SMB). I have already followed the steps of sk97691, but without a solution.

[PhoneBoy · Accepted solution]

Sounds like you are using a service of “Any” in your HTTPS Inspection policy.
That will definitely break SIC.

[lfcalves]

I adjusted the "any" rule and solved the problem!

Thanks!

[PhoneBoy]

Best practice is to only use HTTPS and http_proxy as services in the HTTPS Inspection policy.
Also the last rule should be an any any any bypass.