Some websites do not load completely when using the SPDY protocol with HTTPS through the ProxySG appliance

book

Article ID: 168714

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

The following information is for SGOS 6.6.x and SGOS 6.5.x versions earlier than 6.5.8.3.

The following websites use SPDY protocol with HTTPS and do not load completely:
  • Wikipedia
  • VirusTotal
  • Work Rules!

Cause

The ProxySG appliance cannot load webpages that use SPDY protocol with SSL interception.

Resolution

If this issue occurs in SGOS 6.5.x, upgrade to version 6.5.8.3 or later. This is a known issue in 6.6.x.

Workaround

Disable SPDY protocol in your browser to allow the ProxySG appliance to load the webpage.

For Chrome, in the address bar, enter:
 
"...\chrome.exe" --use-spdy=off --use-system-ssl 

For Firefox:
  1. In the address bar, enter: about:config
  2. In the list of commands, find network.http.spdy.enabled
  3. Set network.http.spdy.enabled  to false
For Internet Explorer:
  1. Select Tools > Internet Options > Advanced.
  2. Under HTTP settings, clear the Use SPDY/3 check box.

For explicit ProxySG deployments, disable SSL Protocol Detection in policy:
     <proxy>
     url.domain=wikimedia.org detect_protocol(none)
     url.domain=wikipedia.org detect_protocol(none)