R3000 Patches 1.5.2
Important Information About HTTPS Filtering on the 8e6 R3000
Background
Some 8e6 customers previously encountered problems when accessing HTTPS sites that contain an invalid certificate. This is the result of recent enhancements made to the R3000 feature that protect the R3000 against the use of HTTPS proxy servers to bypass URL filtering. As a general result, the end user receives a "Page Cannot be Displayed" error when attempting to access an HTTPS site with an invalid SSL certificate, but filtering of normal HTTP orequests is not affected.
Update
Patch 1.5.2 was released on April 8, 2005. This patch resolves the issue regarding a user's inability to access an HTTPS site that has an invalid SSL certificate.
The new HTTPS Filtering Level feature is accessible through the GUI via System > Control > Filter window. In the HTTPS Filtering frame, the administrator can select from “None” – “High” to specify the filtering preference for HTTPS sites:
- “None” - if you do not want the R3000 to filter HTTPS sites
- “Low” - if you want the R3000 to filter HTTPS sites without having the R3000 communicate with IP addresses or hostnames of HTTPS servers
- “Medium” - if you want the R3000 to communicate with HTTPS servers in order to get the URL from the certificate for URL validation only (this is the default setting)
- "High” - if you want the R3000 to communicate with HTTPS servers to obtain the certificate with a very strict validation of the return URL
|