Forum Discussion
kuroki
Altostratus
Sep 05, 2025SSLO Policy Condition - Server Certificate (Issuer DN)
What I'm trying to achieve: Bypass a session if the Server Issuer DN = <trusted-DN>. What I have tried: Policy condition of Server Certificate (Issuer DN) and using data group substring matc...
Injeyan_Kostas
Nacreous
Sep 08, 2025Hi kuroki
class match is needed when you need to search against a Data Group
The gui supports basic cases so indeed when you need more avdanced ones you should write custom expressions
kuroki
Altostratus
Sep 08, 2025Indeed - however 'data group' is an option in the GUI - but the resulting expression does not contain 'class match' - hence the need to modify via VPE..
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects