How do you prevent untrusted certificate errors when not using SSL?

Products

• ProxySG Software - SGOS

Issue/Introduction

If a ProxySG is configured to be both a forward and a reverse proxy, and SSL intercept is not being used, it is possible to see the untrusted certificate errors when the forward proxy accesses a HTTPS site. 

Even though SSL intercept is not being used, if a reverse proxy is configured, the SSL component of SGOS is active and can detect an untrusted certificate. 

In order to prevent this error, an SSL Access layer can be added, with a rule to prevent server certificate checking. It is not necessary to have an SSL Intercept layer.

To complete this action:

1. From Policy > Add SSL Access Layer
2. Right Click the Action value and select Set
3. Select New > Set Server Certificate Validation
4. Select Disable server certificate validation > Select OK > Select OK
5. Select Install policy