Enable Certificate Error Handling

The purpose of enabling and configuring certificate error handling depends on how the responses are managed when a request to access a specified domains detects a certificate error. Umbrella can be configured to either ignore errors from specified domains or block access if an error is detected, see Umbrella's help.

Table of Contents

• Prerequisites
• Procedure
  • Enable the Certificate Error Handling toggle button
  • Add a Domain

Prerequisites

Full admin access to the Umbrella dashboard. See Manage User Roles.

Procedure

📘

Note:

You must log into your Umbrella dashboard as an administrator.

Step 1: Enable the Certificate Error Handling button

1. Navigate to Policies > Management>Web Policy and click Global Settings.

2. Under Global Settings, enable the Certificate Error Handling toggle button.

📘

Note:

Enable with caution as ignored certificate errors may result in security threat.

Step 2: Add a Domain

1. Under Certificate Error Handling, type the domain, and click Add.

2. Then select Ignore or Block status and click Done.

📘

Note:

By default, all three domain statuses are set to Block either due to expired certificate, mismatch hostname and unrecognized certificate authority.

3. The user can select a domain and an action   Ignore  or  Block for each type of certificate validation error. The actions Ignore and Block signify the following:

• Ignore: - If you select this action, the error is disregarded, and the request continues processing as if the error does not exist.
• Block - If you select this action, the request is dropped, and a block page is displayed to the user; this is the default action for all certificate errors.

When multiple errors are present, any certificate validation error should take precedence. If no specific configuration is set for a certificate error group, the default action will be to block.

4. To change the domain staus , click Edit .

5. Change the status to Ignore and click Done.

📘

Note:

There should be at least one non-blocking action; only then can we save the configuration settings as the default action is blocked.

6. Once you have changed the domain status , click Save to save the domain settings.

Add a Web Selective Decryption List < Enable Certificate Error Handling > Manage Schedule Settings for the Web Policy