425/749
How to Configure Content Filter 2.0 with HTTPs Domain Filter
Application Scenario
The Content Filter with HTTPs Domain Filter allows you to block HTTPs websites by
category service without SSL-Inspection. The filtering feature is based on 64 categories
built in ZyWALL/USG such as pornography, gambling, hacking, etc.
When user makes HTTPS request, the information contains a Server Name Indication
(SNI) extension fields in server FQDN. Using the SNI to query category from local cache
then cloud database, then take action when it matches the block category in
Content Filter profile.
Set Up the Content Filter on the ZyWALL/USG
Go to CONFIGURATION > UTM Profile> Content Filter > Profile > General Settings. Select
Enable HTTPS Domain Filter for HTTPS traffic.