topic Problem about certificate on Cisco WSA in Web Security

Problem about certificate on Cisco WSA

NUTNICHA PIYANIJDUMRONG — Sat, 09 Mar 2019 03:44:59 GMT

Problem about certificate on Cisco WSA

I implement transparency proxy and enable https proxy

When I browse to the device in Internet Explorer (https://%FQDN%), I get a 'Problem with this website's security certificate' error because the appliance is using the Demo Appliance cert for the web interface.

I use to test by sign certificate by local CA Server and install on WSA (Trust cert with cert domain) , It’s work

But Guest devices which not join domain not work.

I will use public cert solution for fix issue? or you have solution to fix this Issue?

PS.How solution solve this problem by not install cert at client, Because i can't install certificate to all client and guest.

Re: Problem about certificate on Cisco WSA

Ken Stieers — Wed, 23 May 2018 17:52:08 GMT

When you say "Browse to device" do you mean when you browse to the WSA's management interface?

That cert could be a cert from a public vendor.

If you mean you're going to other servers on the internet, you don't have a choice, you MUST install the root or the signing cert itself on the clients.

OR

Build a policy that doesn't decrypt for those stations that aren't domain joined.

Re: Problem about certificate on Cisco WSA

NUTNICHA PIYANIJDUMRONG — Thu, 24 May 2018 02:43:12 GMT

Thank you. I understood.