Not able to download from Windows store when SSL interception is enabled on the Proxy

Products

• ProxySG Software - SGOS

Issue/Introduction

Not able to download from Windows store when SSL interception is enabled on the Proxy

 

Resolution

SSL interception need to be bypassed for certain certificate hostname

The below policy can be added to the local policy file

 

define condition bypass_list

                server.certificate.hostname.substring="apps.microsoft.com"

                server.certificate.hostname.substring="wns.microsoft.com"

                server.certificate.hostname.substring="ws.microsoft.com"

                server.certificate.hostname.substring="wns.windows.com"

end condition bypass_list

<SSL-Intercept>

                condition=bypass_list ssl.forward_proxy(no)