URL question- Autosave feature on Canva.com

[daryl10]

Good Day,

I have a rule created under Custom_Application_Site using regular expression to give access to https://canva.com.

Now the user is able to access the site and all tabs etc, but when they upload a document to it and make changes on the site, its not being saved automatically as how it suppose to work. Any ideas what can be the reason here ?

The  below is url defined by regular expression:

\/canva\.com

\.canva\.com

This is an example the url when editing a document

https://www.canva.com/design/DAGAKzMmEz8/KAq1kx-1WN2CgQxo6FZeqw/edit

[_Val_]

Do you have HTTPS Inspection active?

[daryl10]

Yes HTTPS inspection is active. When I  checked further, Canva had a guide indicating this is due to websockets not being opened. From research websockets uses port 443 and 80  and these are opened.

[_Val_]

That is what I thought. Add a bypass rule for Canva. It seems they are using certificate pinning, so some of the functionality fails.

[daryl10]

ill dig deeper and see if this already exists and test if not. My colleague advised to do a workaround for now and it work

[the_rock]

Hey Daryl,

Just tried this in my lab with ssl inspection on and works when you add *canva*, which is how I always do this if it needs to be whitelisted. 

Andy

[the_rock]

Btw, @daryl10 , I did test this in my lab behind the cluster and worked fine after I uploaded a doc, no issues.

Andy

[daryl10]

tks...ill take a look further and see if there are any other devices or proxy. Probably something I'm just missing