Am having a cloud backup for part of our staff using the Druva InSync cloud backup. The backup gets blocked behind the firewall and its not able to do remote backup to the cloud.

    We checked that with the druva support team when behind the pfsense firewall We get the below logs in inSyncClient.log

{snip}
[2019-02-05 16:15:10,921] [DEBUG] Error validating server certificate: [('SSL routines', 'SSL3_GET_RECORD', 'wrong version number')]
[2019-02-05 16:15:10,923] [ERROR] SSL/certificate error while validating the cloud server's certificate. Error: [('SSL routines', 'SSL3_GET_RECORD', 'wrong version number')]
[2019-02-05 16:15:10,924] [ERROR] Error :Network not reachable. (#100000022). Traceback -Traceback (most recent call last):
File "inSyncLib\inSyncSyncer.pyc", line 4400, in sync
File "inSyncLib\inSyncSyncer.pyc", line 4892, in dosync
File "inSyncLib\inSyncSyncer.pyc", line 4022, in connect
File "inSyncLib\inSyncRPCHelper.pyc", line 307, in Connect3
File "inSyncLib\inSyncRPCHelper.pyc", line 34, in validate_server
File "inSyncLib\inSyncRPCClient.pyc", line 305, in srvcert_invalid
File "inSyncLib\inSyncRPCBase.pyc", line 1275, in connect
File "inSyncLib\inSyncRPCClient.pyc", line 390, in sslwrap
SyncError: Network not reachable. (#100000022)

[2019-02-05 16:15:10,944] [WARNING] Backup failed. Error: Network not reachable. (#100000022)
{snip}

    From the logs, it seems that inSync client is not able to validate the SSL certificate that inSync cloud sends.

-We took network capture to check the network traffic and below was the response from the Druva support team.

    We found that the inSync client is sending "Client Hello." packet but it is not receiving "Server Hello" packet.
    We suspect that the firewall is blocking the SSL/Cipher packets coming from inSync cloud.
    "Server Hello" packet is the one in which the inSync cloud sends the certificate and post then the inSync client will trust the same and then will proceed with the data transfer.

Can someone help me to resolve this? I hav etried whitelisting *.Druva.com but it has not worked. The back up uses SSL on port 80 (TCP ).