https inspection not working?

[kb1]

So i have this gateway in my topology and it looks like the bypass rule that i created for this particular website that is otherwise being bloked because of it being untrusted (having an untrusted certification) does not work, website is https://access.myfrontier.org

and it just gets rejected inspite of the bypass rule, so am i doing something wrong here or is this just an issue with R80.20?

Gateway details-

Gtwy-2> show version all
Product version Check Point Gaia R80.20
OS build 101
OS kernel version 2.6.18-92cpx86_64
OS edition 64-bit

You can see the logs below-

Also more info as it gets rejected first and then also gets accepted for some reason, either way i get a connection closed on my browser-

And the error on the browser-

And the bypass rule i created on smartdashboard (where the custom link i created is https://access.myfrontier.org for this website that im trying to byapss)-

Thanks.

[Wolfgang]

HTTPS Traffic is allowed via a normal rule in the access policy, that‘s your „accept“ seen in the log.

HTTPS-inspection-Blade rejects the traffic to the shown website because the certificate chain is not trusted.

Did you allow untrusted certificates ? Can be found in the HTTPS validation pane.

Wolfgang

[kb1]

Thank you for replying, how do I allow untrusted certificates? Because I haven't done that.

[Wolfgang]

You can configure the handling of untrusted chains and certificates in the HTTPS Validation pane:

Default is, to allow untrusted certificates.

If the problem exists with the certificate chain, you can import your own CA to the list of Trusted CAs.

Did you update the list of trusted CAs following How to update list of Trusted CA for HTTPS Inspection ?

Wolfgang