Smoothwall - Blocking https://account.live.com - Cetificate Error?

[jdell]

Hi Guys,

 

I have had an issue pop up today saying that the https://account.live.com - a redirect from the log on outlook.com is blocked because "The Server's certificate is not signed by a trusted CA."

 

Only just started today!!

 

Any ideas? This is affecting staff and students, staff can ignore the certificate issue and continue.

 

Error attached.

 

[Ashm]

It's most likely due to it using a type of SSL certificate that Smoothwall can't verify - more info here

 

You can get around it by creating a user defined content category and add this domain to it and any others you may be having problems with and then add it to a policy for everyone in HTTPS inspection polices and set it to Do not inspect, above any Decrypt and inspect and Validate certificate only policies.

[shadowx]

It might also be worth trying to manually download the certificate from the site and manually install it into smoothie.

 

I can't remember exactly where it gets added to smoothwall but with the new GUI you can search for certificates" and you should find a page where you can import certificate files. Just go to the site that is blocked, use the browser to view and download the certificate and then go to the smoothwall page and upload.

 

Might work, or it might not!