MCP Gateway cloud services

[Asogan]

Hi All,

After installation of the MCP and the policy uploaded. I receive the error message when i browse google or any other websites.

Can anyone provide solution?

I have attached the error message

Thank you

[Niks]

Hi @Asogan ,

This is because the browser doesn't have the certificate.  Think HTTPS Scanning policy is enabled.

If you try to browse the HTTP site you will not see such an issue.

Browser Requirements and Behavior

When a browser makes a request for an HTTPS site, the browser expects that a web server certificate be provided in the response from the web server. Among some other things, the browser expects the following of the web server certificate:

A.The ‘Common Name’ of the certificate presented matches the name typed in the browser address bar
B.The web server certificate is signed by a Certificate Authority the browser trusts

If the UCE needs to send something to the client (who made an HTTPS request), it MUST sent a certificate, and the browser must trust that certificate (meeting requirements A and B above)

Login to UCE 

1. Go to Policy > Web Policy > Policy.

2. In the Policy Tree, select HTTPS Scanning 

3. HTTPS Connection Options-->HTTPS Connection feature is in use. What does this do?

4.  Click on CUstomer CA to export the certificate used by the browser

5. On Certificate Authority you will find an option (3 dot) to export the certificate.

6. Import this certificate and then check.

Was my reply helpful? If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query! 

If you need assistance please create a new Service request

Regards,

Nikhil

[Asogan]

Hi Niks,

Thank you for your reply. Yes it works. Thank you.

I have one issue. When i browser google.com, it directs to google.com for korea.

Im based in Malaysia.

Can advice. I have attached the screenshot

thank you

[Niks · Accepted solution]

 Hi @Asogan 

The Global Routing Manager (GRM) routes user traffic based on the country in which their DNS server resides.

Example: A client with offices worldwide might have an office in Argentina, but the DNS server used by this office is in Sweden. The users in Argentina would be routed to a Web Gateway Cloud Service European data center because of the DNS server's location in Sweden.

More info :- 

https://kc.mcafee.com/corporate/index?page=content&id=KB87910

Regards,

Nikhil

[Asogan]

Great. It's working.

Thank you for the explanation. Appreciate it.