Websense & Certificates

[CathJ]

I don't know as much about SSL and certificates as I should, and I've come across something that I think is a bit dodgy, but I could be wrong... so I turn to the myBB experts

On a corporate network that uses Websense, secure sites have suddenly stopped working (on Firefox) with the "Connection is Untrusted - "www.fnb.co.za uses an invalid security certificate.The certificate is not trusted because the issuer certificate is not trusted." So I looked at the certificate, and I see that the corporate, and websense, are suddenly involved in the certificate when they never used to be:

Issued To:
CN: www.fnb.co.za
O: CorporateName

Issued By:
CN: websense-V10K.corporatedomain
O: CorporateName

This seems odd to me. If I go to FNB on my home PC, I obviously get a very different certificate.

I only get this error in FF, because in IE they've automatically set it to trust the Corporate CA, but haven't done the same in FF. I can do that, but I don't know if it's safe and secure. Is this something normal that I just haven't seen before?

 

[PsyWulf]

So where they used to let SSL traffic pass through the proxy unhindered the certs are being mangled and modified now?

 

[CathJ]

Apparently what they're doing is now decrypting SSL sessions at the proxy, inspecting traffic, and then forwarding it on the banking/secure sites. I guess they're allowed, because it's their network, but I certainly won't be logging into any secure sites from now on.