Support Center > Search Results > SecureKnowledge Details
Unable to access some HTTPS sites after enabling HTTPS Inspection "Probe Bypass" mechanism
Symptoms
  • "Page not found" error in web browser when trying to connect to some HTTPS sites after enabling HTTPS Inspection "Probe Bypass" per sk104717 (enhanced_ssl_inspection=1).

  • Kernel debug ('fw ctl debug -m fw + drop') shows that HTTPS connection to the HTTPS site is dropped:
    ;fw_log_drop_ex: Packet proto=6 Client_IP_Address:Port -> Server_IP_Address:443 dropped by fwhold_expires Reason: held chain expired;

Cause
  1. The involved HTTPS sites are configured to use TLS v1.1
  2. The HTTPS Inspection is configured to use at least TLS v1.2

Solution
Note: To view this solution you need to Sign In .