Solved

Certificate errors on all browsers when trying to access secure sites

Posted on 2010-09-08
5
1,257 Views
Last Modified: 2012-06-27
We have just setup a new TMG forefront server and since I presume some change was made, we are all getting the following message when trying to access legit secure sites such as the bank sites.

"To help protect your security, Internet explorer has blocked this website from displaying the content with security certificate errors. Click here for options."

You can show blocked content but is is TMG that is causing this issue?
0
Comment
Question by:Jamesm007
  • 3
  • 2
5 Comments
 
LVL 65

Expert Comment

by:rockiroads
ID: 33632587
I assume this is IE? did u try changing the security settings?

first give this a try

tools->internet options->security tab->internet->custom level_>find display mixed content and set to enable

or if running on trusted sites

tools->internet options->security tab->trusted-> click on sites then add your websites
0
 
LVL 1

Accepted Solution

by:
Jamesm007 earned 0 total points
ID: 33632602
I just worked it out, It seems that after turning off allow HTTP inspection ins forefront this has resolved the issue!

I dont recall turning it on
0
 
LVL 65

Expert Comment

by:rockiroads
ID: 33632610
im not too familiar with forefront but is there a security wizard?

I was reading this and it talks about https inspection. is this something you have dealt with? http://www.microsoftnow.com/2010/06/blocking-skype-and-other-im-protocols-in-forefront-tmg.html
0
 
LVL 65

Expert Comment

by:rockiroads
ID: 33632616
oh, beaten me to it :) I was searching the net trying to find solutions to your problem. Well hopefully the link given gives you some insight to https inspection. I think it needs the web access policy configuring to make it more secure.
0
 
LVL 1

Author Comment

by:Jamesm007
ID: 33633571
yes thanks, I think someone internally has been playing with my servers and has changed something as it was working yesterday and problem occured this morning :(
Too many techs, no one willing to own up!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Microsoft's ISA Server has been its pre-eminent security product for about a decade and is still regarded amongst the well-informed as one of the best software firewalls and application gateways ever released, by any manufacturer. ISA Server has bee…
Forefront Threat Management Gateway 2010 or FTMG comes with some very neat troubleshooting tools built-in when trying to identify what is actually happening behind the scenes within the product when traffic is passing through its interfaces. To the …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now