Untrusted certificate block with user check

[eliadr]

Hi everyone.

I've configured recently my FWs (in the HTTPS inspection) to drop all untrusted and expired certificates.
The problem is that it sends an RST, so the user doesn't understand what's the problem.

Can I somehow show a UserCheck page (like URLF does)?
Maybe another suggestion?

MGMT- R81
SG - 80.40

Thanks.

[PhoneBoy · Accepted solution]

UserCheck is usually invoked when a specific Access Policy rule is triggered.
HTTPS Inspection occurs before the Access Policy is evaluated.
Pretty sure you cannot trigger a UserCheck message in this case.
Sounds like a good RFE.

[_Val_]

As Phoneboy said, not at this point. Open and RFE if you need this feature.