Solved

Certificate errors on all browsers when trying to access secure sites

Posted on 2010-09-08
5
1,260 Views
Last Modified: 2012-06-27
We have just setup a new TMG forefront server and since I presume some change was made, we are all getting the following message when trying to access legit secure sites such as the bank sites.

"To help protect your security, Internet explorer has blocked this website from displaying the content with security certificate errors. Click here for options."

You can show blocked content but is is TMG that is causing this issue?
0
Comment
Question by:Jamesm007
  • 3
  • 2
5 Comments
 
LVL 65

Expert Comment

by:rockiroads
ID: 33632587
I assume this is IE? did u try changing the security settings?

first give this a try

tools->internet options->security tab->internet->custom level_>find display mixed content and set to enable

or if running on trusted sites

tools->internet options->security tab->trusted-> click on sites then add your websites
0
 
LVL 1

Accepted Solution

by:
Jamesm007 earned 0 total points
ID: 33632602
I just worked it out, It seems that after turning off allow HTTP inspection ins forefront this has resolved the issue!

I dont recall turning it on
0
 
LVL 65

Expert Comment

by:rockiroads
ID: 33632610
im not too familiar with forefront but is there a security wizard?

I was reading this and it talks about https inspection. is this something you have dealt with? http://www.microsoftnow.com/2010/06/blocking-skype-and-other-im-protocols-in-forefront-tmg.html
0
 
LVL 65

Expert Comment

by:rockiroads
ID: 33632616
oh, beaten me to it :) I was searching the net trying to find solutions to your problem. Well hopefully the link given gives you some insight to https inspection. I think it needs the web access policy configuring to make it more secure.
0
 
LVL 1

Author Comment

by:Jamesm007
ID: 33633571
yes thanks, I think someone internally has been playing with my servers and has changed something as it was working yesterday and problem occured this morning :(
Too many techs, no one willing to own up!
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Change Default Gateway on Exchange Server 7 439
The purpose of SMTP server 4 525
Unable to open a YouTube Video 4 330
ISA 2004 site to site VPN 1 77
Forefront is the brand name for Microsoft's major security product. Forefront covers a number of specific security areas and has 'swallowed' a number of applications under this umbrella including Antigen, ISA Server, the Integrated Access Gateway (t…
In all versions of ISA Server and the current version of FTMG, the default https protocol uses TCP port 443 and 563 only. This cannot be changed within the ISA or FTMG GUI and must be completed from a Windows cmd prompt on the ISA Server itself. …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question