Search found 163 matches

by david
17 Jul 2021 16:43
Forum: Configure CacheGuard in frowarding mode
Topic: ERR_PROXY_CERTIFICATE_INVALID
Replies: 9
Views: 3547

Re: ERR_PROXY_CERTIFICATE_INVALID

Hi, It is also possible that you didn't connect the right CG ports to your other network devices. The following command gives you the association between physical (Ethernet) ports and logical interfaces: link bond You can use it to identify ports on your CG. Please note that the internal interface s...
by david
16 Jul 2021 18:10
Forum: Configure CacheGuard in frowarding mode
Topic: ERR_PROXY_CERTIFICATE_INVALID
Replies: 9
Views: 3547

Re: ERR_PROXY_CERTIFICATE_INVALID

The default proxy port is 8080. The 8090 port is the default Web GUI administration port. Please double check that 10.11.3.3:8080 is used as HTTP, HTTPS and FTP proxy. Also Chrome under a supported desktop environment (such as Windows) uses the system proxy settings. Did you setup the proxy configur...
by david
16 Jul 2021 15:26
Forum: Configure CacheGuard in frowarding mode
Topic: ERR_PROXY_CERTIFICATE_INVALID
Replies: 9
Views: 3547

Re: ERR_PROXY_CERTIFICATE_INVALID

(for security reasons I deleted the links that reveal your public IP addresses - below your IP configuration) ip internal 10.11.3.3 255.255.255.0 ip external xxx.xxx.xxx.107 255.255.255.248 ip route 10.10.20.0 255.255.255.0 10.11.3.254 10 192.168.254.0 255.255.255.0 10.11.3.254 10 default xxx.xxx.xx...
by david
16 Jul 2021 12:56
Forum: Configure CacheGuard in frowarding mode
Topic: ERR_PROXY_CERTIFICATE_INVALID
Replies: 9
Views: 3547

Re: ERR_PROXY_CERTIFICATE_INVALID

Can you hit an HTTP (not S) website such as http://www.example.com to check network connectivity please ? Do you have any other security devices in front of your CG? If so, can you please check that they don't block Web traffic and/or make SSL inspection by generating dynamic certificates? Please se...
by david
15 Jul 2021 20:50
Forum: Configure CacheGuard in frowarding mode
Topic: ERR_PROXY_CERTIFICATE_INVALID
Replies: 9
Views: 3547

Re: ERR_PROXY_CERTIFICATE_INVALID

Hi,
Can you also please provide with the website that you are trying to browse via CacheGuard proxy?
Thanks in advance,
by david
15 Jul 2021 20:32
Forum: Configure CacheGuard in frowarding mode
Topic: ERR_PROXY_CERTIFICATE_INVALID
Replies: 9
Views: 3547

Re: ERR_PROXY_CERTIFICATE_INVALID

Hi,

Thank you for your post.

Can you please let us know the following:
  • Your client OS?
  • Your client browser & version?
Did you activate the SSL mediation mode? To know if the SSL Mediation mode is activated or not please use the following command from the CLI:

Code: Select all

mode sslmediate
Best Regards,
by david
02 Jul 2019 19:35
Forum: Configure the URL Guarding
Topic: Unable to get URL Guarding to work
Replies: 4
Views: 5222

Re: Unable to get URL Guarding to work

Hello, One more thing: as www.facebook.com use HTTPS and not HTTP, the redirection to the guarding message page can't work and your Web browser will get an error. This is normal and is is due to the nature of HTTPS that can't be redirected to a third page. Maybe you better test the URL guarding with...
by david
02 Jul 2019 19:30
Forum: Configure the URL Guarding
Topic: Unable to get URL Guarding to work
Replies: 4
Views: 5222

Re: Unable to get URL Guarding to work

Hi, URLs specified in urls.gz should not contain the protocol part. Actually the the name "urls" is not really appropriate. For instance www.facebook.com/directory is correct while https://www.facebook.com/directory is not. Domain names specified in domains.gz should contain domain base names. For i...
by david
01 Jul 2019 21:18
Forum: Configure the URL Guarding
Topic: Unable to get URL Guarding to work
Replies: 4
Views: 5222

Re: Unable to get URL Guarding to work

Hello, You don't need to register your appliance for the URL guarding to work. To simplify, you have the possibility to don't use filter but only the default policy. Can you please give us your domain and url lists and the ouput of the following commands? urllist guard filter guard policy guard rule...
by david
08 May 2019 08:42
Forum: Configure CacheGuard in frowarding mode
Topic: Non-Transparent
Replies: 14
Views: 11943

Re: Non-Transparent

Hi, Sorry for the delayed response. Well, it seems you are in asymmetric routing configuration. As CG acts as a stateful firewall, requests and related responses should pass by the same network interface. In your configuration Web client/browser requests pass by the internal interface while response...