SSL Inspection Policy
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 194
To replace the internal CA:
1. Go to Certificates > Internal Certificate.
2. Click Replace Internal CA.
The Upload a P12 Certificate window opens.
3. Click Browse to select the certificate file.
4. Enter the Certificate name and Password.
5. Normally, the device suggests its own host name (when DDNS is configured) or its external IP
address. If you have multiple Internet connections configured, in load sharing mode, you can
manually enter an accessible IP address for this appliance. This is used by remote sites to access the
internal CA and check for certificate revocation.
6. Click Apply.
SSL Inspection Bypass Policy
You can select categories that are bypassed for all possible traffic regardless of its source and destination.
To configure more advanced exceptions, go to the SSL Inspection Exceptions page.
To set the SSL inspection bypass policy:
n
Wireless networks to bypass - Select or clear which wireless networks to bypass. Untrusted
networks are selected by default.
Note - Wireless networks must be assigned to Separate Network, not switch or bridge.
n
Categories - Select or clear the privacy related categories that are not inspected. All categories
except for Media Streams are selected by default.
n
Tracking - Select to enable logs to indicate that the SSL inspection policy decision was inspect or
bypass.
Note - These logs are generated in addition to the logs generated by the Software Blades.
To add other categories:
Note - The Bypass checkbox is selected by default.
1. Click other categories and sites.
The SSL Inspection Bypass Other window opens.
2. Select the desired items.
3. Optional - Click New to add URLs or custom applications.
4. Click Apply.
To Next Page
Loading...
Need help?
General
