https://community.cisco.com/t5/network-security/ftd-ssl-decryption-not-working-for-certain-sites/m-p/3879332#M942095 <P>Just to add some more information.&nbsp; The Event Viewer is showing allow for it, default action is allow and a packet capture by wireshark sees the correct resigned cert.</P> Tue, 25 Jun 2019 14:49:46 GMT mattmacnish86 2019-06-25T14:49:46Z https://community.cisco.com/t5/network-security/ftd-ssl-decryption-not-working-for-certain-sites/m-p/3879327#M942088 <P class="s1wjcqzz-10 lkEbBw">Has anyone had an issue when implementing SSL decrypt resign with it not working for certain sites (for example theguardian.com or pinterest).</P><P class="s1wjcqzz-10 lkEbBw">The frustrating thing is this is not always the same on every PC with certain ones working on different machines.</P><P class="s1wjcqzz-10 lkEbBw">There is no known error message and the packet capture shows the right cert is being sent to the device.</P><P class="s1wjcqzz-10 lkEbBw">Also the FMC shows that its being allowed as well.</P><P class="s1wjcqzz-10 lkEbBw">TAC is looking into it as well but thought I'd ask if anyone has seen this before.</P> Fri, 21 Feb 2020 17:14:31 GMT https://community.cisco.com/t5/network-security/ftd-ssl-decryption-not-working-for-certain-sites/m-p/3879327#M942088 mattmacnish86 2020-02-21T17:14:31Z https://community.cisco.com/t5/network-security/ftd-ssl-decryption-not-working-for-certain-sites/m-p/3879332#M942095 <P>Just to add some more information.&nbsp; The Event Viewer is showing allow for it, default action is allow and a packet capture by wireshark sees the correct resigned cert.</P> Tue, 25 Jun 2019 14:49:46 GMT https://community.cisco.com/t5/network-security/ftd-ssl-decryption-not-working-for-certain-sites/m-p/3879332#M942095 mattmacnish86 2019-06-25T14:49:46Z