Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Defense: Why Are Godaddy's OCSP And CRL Domains Required When Installing A 3.3 + Sensor?

CB Defense: Why Are Godaddy's OCSP And CRL Domains Required When Installing A 3.3 + Sensor?

Environment

  • CB Defense Sensor: 3.3 and Higher

Question

Why Are Godaddy's OCSP And CRL Domains Required When Installing A 3.3 + Sensor?

Answer

Beginning with version 3.3.x.x, the Sensor utilizes WinSSL to perform an online CRL validation check via GoDaddy URLs (crl.godaddy.com and ocsp.godaddy.com)

Additional Notes

  • If a proxy is in place, please leverage one of four workarounds to allow CRL traffic as noted here 
  • If those workaround are not possible or do not resolve the issue, please open a support case

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
3339
Contributors