- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-12-2017 04:36 PM - edited 03-08-2019 05:41 PM
Hello folks!
I'm configure some profiles on the WSA to allow my white list and almost work everything, just one URL show that is not possible to open because the certificate error.
If I take of the proxy works fine, for this reason I believe that is some configuration problem on my WSA.
My configuration Manager is 9.1
Anyone can help?
Solved! Go to Solution.
- Labels:
-
Web Security
Accepted Solutions

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-24-2017 05:36 AM

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-24-2017 05:36 AM
For some reason, sometimes the WSA has an issue with an intermediate cert/cert chain. You can upload the intermediate and/or root to clear it up.
Go to the site using a browser that isn't behind the WSA. Click on the lock in the address bar so it shows you the cert. View the cert chain and save the intermediate and root certso as base64 files. Go to the gui on the WSA, Network/Certificate Management/Manage Root Certs and upload these two certs.
Once uploaded, check the On Cisco List column. If it says yes you can delete that one... submit/commit
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-28-2023 08:19 PM
Very helphul information, we have the same issue with Usertrust certificates we added in Manage Root Certs and after commit we are able to see domain without certs problems.
Regards

For some reason, sometimes the WSA has an issue with an intermediate cert/cert chain. You can upload the intermediate and/or root to clear it up.
Go to the site using a browser that isn't behind the WSA. Click on the lock in the address bar so it shows you the cert. View the cert chain and save the intermediate and root certso as base64 files. Go to the gui on the WSA, Network/Certificate Management/Manage Root Certs and upload these two certs.
Once uploaded, check the On Cisco List column. If it says yes you can delete that one... submit/commit