When we upgraded to KSC11 and KESB11.1, we are now receiving untrusted certificate warning which we are not receiving from KSC10 and KESB11.
In our existing policies we already tried to include the address in the Web Threat Protection exclusion and enabled the Use trusted system certificate store in the Trusted zone pointing to where we stored the certificate but still untrusted certificate warning still prompts
Any suggestion is appreciated.
Best answer by Caos
This is because of the new module included in version 11.1 of the analysis of encrypted connections.
This module can be found in the following section of the directive> general configuration> network configuration.
If when analyzing a url, it does not find in a clear way a signed security certificate, it emits that message, the solution is to add the domain to Trust.