Facebook notifications failing to load from mobile phones when doing SSL Interception.

Products

• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

The purpose of this article is to provide a way to prevent having an error page when trying to perform SSL Interception for the Facebook app and opening the Notifications section.

Cause

Some of the requests that Facebook uses are not SSL-Compliant and so they break when going through the appliance.

Resolution

Enable the TCP Tunnel on Error feature under Configuration > Proxy Settings > General can be enabled for this cases in order to avoid having this issue. It can also be prevented by disabling protocol detection on the request/s that are failing.