HTTPS site access issue with Windows 8.1 and Internet Explorer 11

Products

• ProxySG Software - SGOS

Issue/Introduction

If using a PC with Windows 8.1 and Internet Explorer 11, access to some HTTPS sites does not work.

Cause

This issue can occur if the site wants to use TLS session tickets. If the server sends back a server HELLO that contains a TLS session ticket, the connection fails.

Resolution

Blue Coat is currently working on a fix for this issue in the following SGOS versions and bug numbers:

• SGOS 6.5 - B#211683
• SGOS 6.2 - B#211676

 

Workaround

Disable protocol detection for the sites that are affected or enable disable protocol detection for all HTTPS sites:

Per affected site:

<proxy>
  url.domain="domain.com" detect_protocol(no)


For all HTTPS sites:

define condition __SSLPort
 url.port=443
end condition __SSLPort

<proxy>
  condition=__SSLPort detect_protocol(no)