cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
406
Views
0
Helpful
1
Replies

SSL deep packet inspection

tedauction
Level 1
Level 1

Hello, I am running SSL deep packet inspection (proxying users SSL queries) via my firewall.

I have noticed that some websites fail until I make an exception for them. I understand this is normally due to public key pinning (HPKP).

However I have run numerous tests on these websites and they do not seem to be using public key pinning.

What other reasons could there be for Deep Packet Inpsection failing on some HTTPS websites ?

Thank you.

1 Reply 1

Philip D'Ath
VIP Alumni
VIP Alumni

Sometimes they use old technologies like SSLv3 instead of TLSv1.2 so so the proxies will refuse to connect to them.

Review Cisco Networking for a $25 gift card