No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

SSL Decryption Certificate field is not enable

Publication Date:  2017-12-23 Views:  211 Downloads:  0
Issue Description

Customer has reported problems to view the “SSL Decryption Certificate” field, after have upgraded the firmware version of the USG6310 from V1R1 to V5R130 the devices leave to show this field.




Alarm Information

After have confirmed in to the Certificate field the SSL Decryption Certificate is not available.




Handling Process


1st Step: Check the license.

After have confirmed the license is already activated.




2nd Step: Confirm if the CSG packet is charged in the FW.




The FW do not include the CSG packet thats why the SSL Decryption field is not available.


Root Cause

After have performed the upgrade the upgrade the CSG packete was not installed correctly also the portal sec.huawei.com it was not configured thats why the FW was not able to download automatically the CSG, AV & IPS packets.

Solution

In order to enable this field is necessary download the CSG package from the Security Center web page and then installed in the Firewall.





CSG Package:


After have charged the package in the system upgrade field, the SSL Decryptiion Certificate appears:




SSL Decryption Certificate:







Suggestions

Configure the DNS and create the security policy to sync the Firewall with the web server "Sec.huawei.com" in this way the FW will upgrade automatically from the huawei portal


END