SSL sites displaying a blank page in a ProxySG or ASG deployment

book

Article ID: 168287

calendar_today

Updated On:

Products

Advanced Secure Gateway Software - ASG ProxySG Software - SGOS

Issue/Introduction

In an explicit proxy deployment using ProxySG or Advanced Secure Gateway (ASG), any SSL page that is blocked is not returning an exception page.

Resolution

  1. Open the VPM (Configuration > Policy > Visual Policy Manager > Launch) and create the following policy:
    • Web Access Layer, rule#1
      • source = any
      • destination = Request URL Category
      • service = All HTTPS
      • action = Deny​
    • ​​​SSL Intercept Layer
      • source = any
      • destination = any
      • service = any
      • action = EnableHTTPSIntercept
      • No SSL Access Layer is needed for this explicit connection.
  2. In the Management Console, select Configuration > Services > Proxy Service and make sure the HTTP service is configured with these settings:
    • Port 8080
    • Enable Detect Protocol