cancel
Showing results for 
Search instead for 
Did you mean: 

Cannot establish a secure connection to the URL

Not applicable

Cannot establish a secure connection to the URL

Hi,

i created bookmark on pulse secure VPN, but i have problem with it. If user clicked on it then receive error " Cannot establish a secure connection to the URL. Check if this connection requires 'http:' instead of 'https:'. If the problem persists, contact your system administrator. Made https request for GET xxxx" The URL is accesible from internet, not internal only, and if i set rendering policy "Go Direct" then works ok, but i need go via internal network.

Could you please help me how can i debug it?

Jiri

1 REPLY 1
Pulser

Re: Cannot establish a secure connection to the URL

Hello Jiri,

You say that the URL is not reachable from the internal network:

"The URL is accesible from internet, not internal only, and if i set rendering policy "Go Direct" then works ok, but i need go via internal network. "

If you do not use a selective rewriting policy that is "Don’t rewrite content: Redirect to target Web server" then the request will then be sourced from the internal interface to the URL as the content will need to be sent back to the internal interface so the content can be rewritten and sent back to the external client. This fails as your internal network cannot access the requested URL.
The selective rewriting options are at https://docs.pulsesecure.net/WebHelp/PCS/8.3R1/Home.htm#PCS/PCS_AdminGuide_8.3/Creating_a_Selective_Rewriting.htm

So you will need to use the selective rewrite policy to redirect users to go direct to the URL or allow the internal interface to access the URL.

Tools you can use to help debug rewriting issues are:
Policy trace (https://docs.pulsesecure.net/WebHelp/PCS/8.3R1/Home.htm#PCS/PCS_AdminGuide_8.3/Using_Policy_Tracing_to_Troubleshoot.htm) to check what policies are applied for the user

DSRecord (https://docs.pulsesecure.net/WebHelp/PCS/8.3R1/Home.htm#PCS/PCS_AdminGuide_8.3/Using_the_Session_Recording.htm) which will log the web requests and show how the rewriter has modified them and the return content.


Regards,

--
Matt