home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Allow a Certificate Authority to Suppress Man-in-the-Middle Threats

If an allowlisted certificate authority is present in a certificate chain as a root, intermediate, or leaf certificate, that connection does not generate Man-in-the-Middle threats in the Lookout MES Console.

There are two ways to allow a certificate:

  1. Navigate to the Issue Details page for an MitM detection and click to allowlist the certificate:
    1. From the Issues module, select the MitM attack with the certificate that you wish to allowlist.
    2. Click Trust certificates.
    3. Optionally, in the Trust certificates dialog box, uncheck any certificates you do not wish to trust, then click Trust these certificates:
    4. Click Okay.
  2. Manually upload the certificate:
    1. Navigate to the Protections module and scroll down to the Man-in-the-Middle Attack

      issue classification, then click the configuration gear:

    2. Click Add an Entry and browse to the certificate file you wish to upload.
    3. Click Save changes.

      To remove an allowlisted certificate:

  3. Navigate to the Protections module and scroll down to the Man-in-the-Middle Attack issue classification, then click the configuration gear.
  4. Remove a certificate by highlighting its row and clicking the trash icon:
  5. Click Save changes.