Secure Access DNS Onboarding Guide

PDF

Secure Access DNS Onboarding Guide

Manage Certificates and Block Pages

Review documentation on how to manage certificate installations and lifespans, block pages, and notification pages. Certificates are required for internet access as well traffic decryption and inspection. Ensure these components are configured to avoid browser errors.


Certificates are required for secure internet access. Specifically, certificates are required to decrypt traffic to inspect it for threats, and to present notifications to end users when access is blocked or triggers a warning. Cisco provides trusted root store bundles, which contain information about certificates used by Cisco products. The Cisco Secure Access root certificate is essential for Cisco Secure Access to proxy and decrypt HTTPS traffic.

The Secure Access Root certificate is needed for two main functions, displaying block pages when a user visits a blocked HTTPS domain and enabling HTTPS decryption and inspection without causing browser errors.