Hi all, I have a MX84 and it has recently started blocking traffic to a few specific URL's. I know this because if I whitelist a client, they can get to the site without issue. After, if I de-whitelist (make "normal") the client, they can continue to access the site. To me, this is indicative of the certificate being blocked, not the site itself. I had a similar issue a few years ago where a client cert was being blocked, and as soon as I would whitelist the client, it would become active again, then de-whitelisting the client allowed the client to continue to connect securely. Eventually, I traced the issue down to the layer 7 firewall rule I have to not allow traffic to anything but the US (we are a very small community-based company). Adding the country where the CA cert was based out of fixed the issue. The thing is if I go to Network Wide > Event Log > Filter by the client, there's no events saying anything is being blocked. Does anyone know how I can accurately troubleshoot this issue and see why this traffic is being blocked?
... View more