I am able to access a certain website https://buzzlightyear.acme.com:68080 from within a corporate network (Obviously the default https port 443 has been allowed in the windows firewall of the machine buzzlightyear.acme.com).
The same company provided a personal PC, and I would VPN (connect via home WIFI) and can access the same server via RDP.
However, I am not able to access the above website. Can confirm that I had the proxy settings disabled.
When I informed the security network team of the said company they said they opened up the port 68080 and now I can access the said URL.
Where would this second whitelisting be performed (in general), and why does the whitelisting of 443 is not enough?
When I access the page via IE it works fine. But receive a warning when I access it via Firefox or Chrome. It warns that the connection is not private. Having a look at the http certificate it says the Certificate is ok, however, the Signature Hash Algorithm is SHA-1. When I asked whether it is not possible to generate a SHA-256 certificate they said it would involve a lot of work? Is that true? Also please do point me an article with a clear explanation (high level) of the changes required.
Thanking in Advance, Peter