katycomputersystems 1 Posted October 22, 2021 Share Posted October 22, 2021 On workstations with Endpoint Protection, I am getting: ERR_BAD_SSL_CLIENT_AUTH_CERT when trying to access these urls: https://white_label.s3.us-east-1.amazonaws.com/UFW/logo-ufw-white.png https://white_label.s3.us-east-1.amazonaws.com/UFW/Favicon-UFW-blue.png?v=2 Without endpoint protection, Chrome tells me the corticates are fine. Any idea what's going on and how to clear the issue? Link to comment Share on other sites More sharing options...
katycomputersystems 1 Posted October 22, 2021 Author Share Posted October 22, 2021 Support helped me with this. We added "s3.amazonaws.com" to the list of known certificates to be ignored via Advanced Setup | Web and Email | SSL/TLS | List of Known Certificates We then exported my local workstation's configuration, imported it as a policy in Protect and applied the policy to our client workstations. Link to comment Share on other sites More sharing options...
itman 1,538 Posted October 22, 2021 Share Posted October 22, 2021 (edited) 1 hour ago, katycomputersystems said: On workstations with Endpoint Protection, I am getting: ERR_BAD_SSL_CLIENT_AUTH_CERT when trying to access these urls: https://white_label.s3.us-east-1.amazonaws.com/UFW/logo-ufw-white.png https://white_label.s3.us-east-1.amazonaws.com/UFW/Favicon-UFW-blue.png?v=2 I can access those URLs w/o issue using Firefox. This indicates the problem lies w/Eset SSL protocol scanning on Chrome. Whereas the cert. exclusions to SSL protocol scanning works for the cert. used by the domain noted, I suspect you're going to have issues with other URL's. Edited October 22, 2021 by itman Link to comment Share on other sites More sharing options...
Administrators Marcos 4,705 Posted October 23, 2021 Administrators Share Posted October 23, 2021 No problem opening the website in Chrome: You can try the following: - reboot the machine - without launching a browser, disable SSL filtering in the advanced setup and click OK - re-enable SSL filtering - check if the problem persists. Link to comment Share on other sites More sharing options...
Recommended Posts