MISMIS Lv3Posted 21 Aug 2023 16:47
  
SSL decryption can sometimes cause issues with certain clients or applications that expect a direct SSL connection. Check if the websites you are trying to decrypt are compatible with SSL interception.
isabelita Lv3Posted 21 Aug 2023 16:47
  
Some websites may have issues when being decrypted. Verify if you have configured any URL exclusions in the SSL decryption profile for websites that should not be decrypted.
RegiBoy Lv5Posted 21 Aug 2023 16:48
  
Ensure that your NGAF Firewall 5100 has a valid license for SSL decryption and that you are using a firmware version that supports SSL decryption features. Check with Sangfor support or documentation for compatibility.
Naomi Posted 21 Aug 2023 16:48
  
If your are not sure what is next, you can contact support team of sangfor and they will help you.
faysalji Lv3Posted 21 Aug 2023 22:10
  
Here are a few things to check:
  • Make sure that the certificate for the *.genK.vn website is installed on the NGAF firewall. You can do this by going to Security > SSL Decryption > Certificates and uploading the certificate file.
  • Make sure that the *.genK.vn website is included in the list of websites that are allowed to be decrypted. You can do this by going to Security > SSL Decryption > Rules and adding a rule for the *.genK.vn website.
  • Make sure that the NGAF firewall is properly configured to decrypt SSL traffic. You can check the configuration by going to Security > SSL Decryption > Settings.

If you have checked all of these things and the SSL decryption is still not working, you can contact Sangfor support for help.
Here are the steps on how to configure SSL decryption for the *.genK.vn website on the NGAF firewall:
  • Log in to the NGAF management console.
  • Click on "Security".
  • Click on "SSL Decryption".
  • Click on "Certificates".
  • Click on "Upload" and select the certificate file for the *.genK.vn website.
  • Click on "Save".
  • Click on "Rules".
  • Click on "Add".
  • In the "Name" field, enter a name for the rule.
  • In the "Domain" field, enter the domain name of the website, which in this case is *.genK.vn.
  • In the "Action" drop-down menu, select "Decrypt".
  • Click on "Save".
  • Click on "Settings".
  • Make sure that the "Enable SSL Decryption" checkbox is checked.
  • Click on "Save".

Once you have completed these steps, the NGAF firewall should start to decrypt SSL traffic for the *.genK.vn website.
I hope this helps!

I Can Help:

Change

Moderator on This Board

11
7
5

Started Topics

Followers

Follow

1
3
5

Started Topics

Followers

Follow

0
4
5

Started Topics

Followers

Follow

67
20
3

Started Topics

Followers

Follow

3
14
3

Started Topics

Followers

Follow

1
137
3

Started Topics

Followers

Follow

Board Leaders