Failed to connect google/Apple/etc. website with https

[Jokul]

Chome browser failed to work as another ssl certificate returned to browser (the cert is with orbi keywords from 1-2 years ago). Could you please help to figure out how I can stop orbi trying to decrypt network traffic by using man in the middle trick? This happens couple days ago, I reboot/reset, the problem still exists, but not always, like it is working now after reboot..

[FURRYe38]

What FW is currently loaded?
What is the Mfr and model# of the ISP modem the NG router is connected too?

Does IE11, FF or Opera browsers do the same thing? 

[Jokul]

Symantec Eendpoing Protection Mobile is giving one alert: The hostspot attemped to decrypt secure communications. The hotspot used an unsafe "Captive Portal" technique and attemped to decrypt and relay messages instead of establishing direct encrypted communications.

I have home and guest network, when I connect to guest netowrk, no problem found, but once I connect back to home network, SEP mobile gaves the alert and automatically connects to VPN for protection. Please help to figure out why my orbi trying to decrypt. Thanks! (attached the alert from SEP Mobile)

[FURRYe38]

You'll need to contact Symantec and ask them for help and information regarding this and how there program works with Orbi systems. This maybe a false positive message which there system may not be aware of how the Orbi works and or may need to review there program to ensure it works with Orbi systems. 

Personally I don't run any firewall programs on my PCs behind the Orbi. The Orbi already has a firewall. Only security programs I run is malware bytes and AV. 

Let us know what you find out from Symantec...

[Jokul]

Hardware Version: RBR50

Firmware Version: V2.2.1.210
GUI Language Version: V1.0.0.339
Operation Mode: Router

When the problem happen, all device has the problem, iphone, ipad, mac, etc. Failed to see youtube on iPhone, failed to open google on Mac, etc. But website without https can work.

And when the issue happen, I even can't connect to the router with mobile app, only can connect to router on laptop with ip address.

[FURRYe38]

What is the Mfr and model# of the ISP modem the NG router is connected too?

[Jokul]

The modem is from Time Warner Cable - Spectrum, model is: DPC3216 (technicolor)

[Jokul]

I don't think it is Symantec Mobile problem, the alert only happens when all device has connection problem. (The Symantec Mobile only installed on my iPhone.) It might be giving incorrect problem name. The ssl certificate sproofing (man in the middle) is the rootcause that all device can't connect to google/apple services.

[FURRYe38]

Can you disable this app and test the iPhone with out it enabled and see if the problem continues? This points to this app as I have not see anything like this with my system and iPhone and connecting to web sites with mobile devices and other devices. However I don't have this app installed on my devices. 

I would power OFF the ISP Modem, Orbi router and satellites for 1 minute, then power ON the ISP modem,let it sync. Power ON the Orbi router and let it come to ready. Use 1 wired or wireless PC or mobile device to check internet access and services. Turn on Satellite(s) after testing...

[Jokul]

Thanks for the solution, I did all those yesterday, and was thinking the problem should be gone. And even turned off all unnessary service like parental control, vpn server, etc. Only the basic wifi feature was on.

It worked for last night. But the problem came back this morning. 

After I reboot the router, it worked again.

I will be waiting for the problem happen again to capture the orbi SSL certificate returned to browser. (Chrome verifys the certificate is different from the google domain name)

And looks like this is the rootcause that all SSL connection fail. (a wrong orbi SSL certificate send back)

[FURRYe38]

@Christian_R

[ekhalil]

---

@Jokul wrote:

......... And even turned off all unnessary service like parental control, vpn server, etc. Only the basic wifi feature was on.

It worked for last night. But the problem came back this morning. 

.......)

---

Is there anything set under >> Advanced >>Security >> Blocked Services?

[randomousity]

So, I don't know that this is the issue, but it could be. With certain settings, the Orbi will return its own webpage intead of the one you requested. Some scenarios where this will happen is if you have access control enabled and are using a blocked device, if you have the traffic meter enabed and have reached your quota, if you have blocked sites or services enabled and try to access one, etc. So, I'd check all of those and confirm that none of them are the cause.

Other than that, could it be something with the Orbi VPN being enabled and somehow interacting in a bad way with the VPN you're using on your device?

[FURRYe38]

Try a different browswer like IE11, FF or Opera. 

I would also do a factoyr reset on the Orbi router and setup from scratch...You can also do a full re-load of the routers FW as well and see if this might help. 

---

@Jokul wrote:

Thanks for the solution, I did all those yesterday, and was thinking the problem should be gone. And even turned off all unnessary service like parental control, vpn server, etc. Only the basic wifi feature was on.

It worked for last night. But the problem came back this morning. 

After I reboot the router, it worked again.

I will be waiting for the problem happen again to capture the orbi SSL certificate returned to browser. (Chrome verifys the certificate is different from the google domain name)

And looks like this is the rootcause that all SSL connection fail. (a wrong orbi SSL certificate send back)

---

[Jokul]

Thanks for all suggestions, I moved 2nd satellite closer (the signal strength was weak in past). Also another satellite was in sync status after main router reset to factory. Reset the satellite. Now both satellite are in good signal. 

I renabled VPN/parental control. So far, it works for whole day. 

Appreciate for all help! Thanks!

[FURRYe38]

Good to hear. Hope it keeps working well. Enjoy. 

---

@Jokul wrote:

Thanks for all suggestions, I moved 2nd satellite closer (the signal strength was weak in past). Also another satellite was in sync status after main router reset to factory. Reset the satellite. Now both satellite are in good signal. 

I renabled VPN/parental control. So far, it works for whole day. 

Appreciate for all help! Thanks!

---