As of this writing (October 3, 2017), the most current version of SGOS is 6.7.2, the most recent version of WSS is 6.10.1.4, which does not support RFC 5077 new session tickets. If the Mac is configured with a transparent type of proxy deployment (such as using Unified Agent in Cloud mode, or an IPsec tunnel to WSS, or the ProxySG is transparent inline such as using WCCP), then when the application attempts to change cipher spec, client key exchange, encrypted handshake message, it is also sending over an RFC 5077 TLS new session ticket.This behavior was observed whether the configured proxy was a local proxy or a remote proxy (:8080). If the router or firewall does not allow the workstation to have direct access to the Internet, then the request will fail. The Kindle app does not honor the macOS proxy settings and tries to go direct to.Here is a list of problems why the Kindle App for macOS does not work through the Web Security Service (WSS) or a ProxySG appliance:
