Forum Discussion

Anwar_Kapasi_19's avatar
Anwar_Kapasi_19
Icon for Nimbostratus rankNimbostratus
Apr 18, 2018

ByPass untrusted SSL connection while using ServerSSL profile mode as 'require'

SWG version - 12.1.2 We have a VIP setup with ServerSSL profile option Server Certificate as 'require', however we would like to bypass this check for certain URL's [probably use DataGroup] that have self-signed certificates / untrusted.

 

Secure Web Gateway
security
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Apr 18, 2018
    when SERVER_CONNECTED {
    if { [HTTP::uri] equals "/not_to_check_cert_for_this_page" } {
        SSL::profile /Common/serverssl
    }
}