Issue downloading policy file from URL

Products

• ProxySG Software - SGOS

Issue/Introduction

When attempting to download policy file, ProxySG shows "The policy cannot be found at the specified URL" error:

Environment

• Communication with remote server is done using https
• When using http, policy can be downloaded
• Packet capture shows that ProxySG sends FIN,ACK after completing SSL handshake

 

Cause

Certificate presented by remote server where policy is stored is not trusted by ProxySG.

Resolution

Add remote server's SSL certificate to the trusted list on ProxySG:

1. Connect to ProxySG management console
2. Navigate to Configuration -> SSL -> SSL Client and check the name of configured CCL (by default it is set to browser-trusted)
3. Go to Configuration -> CA Certificates and Import remote server's certificate
4. Change tab to CA Certificate Lists and add certificate from step 3 to browser-trusted list

Note: For CA signed remote server certificates (not self-signed) whole Chain has to bee added to browser-trusted CCL