Unable to access websites with HSTS enabled


(obi-wan) #1

I’ve noticed our users are unable to access websites that have HTTP Strict Transport Security (HSTS) with long duration enabled.

I’m wondering if this is a common issue or not and if so do you have any recommendations on how to allow access to HSTS sites when SSL inspection is enabled?


(Diby Chiriyamkandath) #2

I have seen this issue with internal web applications as well and it probably has nothing to do with the ZScaler service. Haven’t tried to see how this is causing the browser to throw an error…
Will let you know if I learn something…