Hi All,
After installation of the MCP and the policy uploaded. I receive the error message when i browse google or any other websites.
Can anyone provide solution?
I have attached the error message
Thank you
Solved! Go to Solution.
Hi @Asogan
The Global Routing Manager (GRM) routes user traffic based on the country in which their DNS server resides.
Example: A client with offices worldwide might have an office in Argentina, but the DNS server used by this office is in Sweden. The users in Argentina would be routed to a Web Gateway Cloud Service European data center because of the DNS server's location in Sweden.
More info :-
https://kc.mcafee.com/corporate/index?page=content&id=KB87910
Regards,
Nikhil
Hi @Asogan ,
This is because the browser doesn't have the certificate. Think HTTPS Scanning policy is enabled.
If you try to browse the HTTP site you will not see such an issue.
Browser Requirements and Behavior
When a browser makes a request for an HTTPS site, the browser expects that a web server certificate be provided in the response from the web server. Among some other things, the browser expects the following of the web server certificate:
A.The ‘Common Name’ of the certificate presented matches the name typed in the browser address bar
B.The web server certificate is signed by a Certificate Authority the browser trusts
If the UCE needs to send something to the client (who made an HTTPS request), it MUST sent a certificate, and the browser must trust that certificate (meeting requirements A and B above)
Login to UCE
Go to Policy > Web Policy > Policy.
In the Policy Tree, select HTTPS Scanning
HTTPS Connection Options-->HTTPS Connection feature is in use. What does this do?
Click on CUstomer CA to export the certificate used by the browser
On Certificate Authority you will find an option (3 dot) to export the certificate.
Was my reply helpful? If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!
If you need assistance please create a new Service request
Regards,
Nikhil
Hi Niks,
Thank you for your reply. Yes it works. Thank you.
I have one issue. When i browser google.com, it directs to google.com for korea.
Im based in Malaysia.
Can advice. I have attached the screenshot
thank you
Hi @Asogan
The Global Routing Manager (GRM) routes user traffic based on the country in which their DNS server resides.
Example: A client with offices worldwide might have an office in Argentina, but the DNS server used by this office is in Sweden. The users in Argentina would be routed to a Web Gateway Cloud Service European data center because of the DNS server's location in Sweden.
More info :-
https://kc.mcafee.com/corporate/index?page=content&id=KB87910
Regards,
Nikhil
Great. It's working.
Thank you for the explanation. Appreciate it.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA