ZyXEL Communications ZyWALL 310 - 46.2.5 SSL Inspection Certificate Cache; 46.2.6 SSL Inspection Certificate Update

Chapter 46 SSL Inspection
ZyWALL Series CLI Reference Guide
425
46.2.5 SSL Inspection Certificate Cache
This table lists the SSL Inspection certificate cache commands.
46.2.6 SSL Inspection Certificate Update
Use these commands to update the latest certificates of servers using SSL connections to the Zyxel
Device network. You must have Internet access and have activated SSL Inspection on the Zyxel Device
at myZyxel.com.
This table lists the SSL Inspection certificate cache commands.
untrusted-cert-chain action
{block | inspect | pass}
{no log | log [alert]}
A certificate chain is a certification process that involves the
following certificates between the
SSL/TLS server and a client. A certificate chain will fail if one of the
following certificates is not
correct.
• A certificate owned by a user
• The certificate signed by a certification authority
• A root certificate
Select to pass, inspect, or block an untrusted certification chain.
ssl-inspection profile rename
ssi_profile_name1
ssi_profile_name2
Renames an SSL Inspection profile.
no ssl-inspection profile
ssi_profile_name
Deletes an SSL Inspection profile.
show ssl-inspection profile
[ssi_profile_name]
Displays SSL Inspection profile settings.
ssl-inspection tls1-3 {activate
| deactivate}
Enables or disables support for TSL 1.3 on the Zyxel Device.
ssl-inspection tls1-2 aesgcm
{activate | deactivate}
Enables or disables support for cipher TSL 1.2 AES-GCM on the Zyxel
Device.
Table 232 SSL Inspection Profile Commands
COMMAND DESCRIPTION
Table 233 SSL Inspection Certificate Cache Commands
COMMAND DESCRIPTION
ssl-inspection cache flush
Clears SSL Inspection cached entries.
show ssl-inspection cert-
list
Displays certificates used in SSL Inspection.
Table 234 SSL Inspection Certificate Update Commands
COMMAND DESCRIPTION
[no] ssl-inspection cert-
update auto
The Zyxel Device automatically updates the certificate set when a new
one becomes available on myZyxel.com.
ssl-inspection cert-update
now
Download the latest certificate set from the myZyxel.com and update it
on the Zyxel Device.
show ssl-inspection default-
cert version
Displays the default certificate update status.