Allow a Certificate Authority to Suppress Man-in-the-Middle Threats
If an allowlisted certificate authority is present in a certificate chain as a root, intermediate, or leaf certificate, that connection does not generate Man-in-the-Middle threats in the Lookout MES Console.
There are two ways to allow a certificate:
-
Navigate to the Issue Details page for an MitM detection and click to allowlist the certificate:
- From the Issues module, select the MitM attack with the certificate that you wish to allowlist.
- Click Trust certificates.
- Optionally, in the Trust certificates dialog box, uncheck any certificates you do not wish to trust, then click Trust these certificates:
- Click Okay.
-
Manually upload the certificate:
- Navigate to the Protections module and scroll down to the Man-in-the-Middle Attack issue classification, then click the configuration gear.
- Remove a certificate by highlighting its row and clicking the trash icon:
- Click Save changes.