SSL/TLS filtering must have extension server_name
![PeterUK](https://us.v-cdn.net/6029482/uploads/avatarstock/n6YKXRWWBKFRM.png)
PeterUK
Posts: 3,512
Guru Member
![](https://www.zyxel.com/library/assets/zyxel-forum/guru_member.png)
![100 Answers](https://us.v-cdn.net/6029482/uploads/badges/64OW7WFEOGRW.png)
![2500 Comments](https://us.v-cdn.net/6029482/uploads/badges/4P4IKXXLVY8D.png)
![Friend Collector](https://us.v-cdn.net/6029482/uploads/badges/HNJASEUSC535.png)
![Seventh Anniversary](https://us.v-cdn.net/6029482/uploads/badges/ZL183DOSGRWD.png)
For Content Filter the SSL/TLS traffic must have extension server_name or else block option.
1
Comments
-
I think the "Trusted Web Sites" , "Forbidden Web Sites" also use SNI (Server Name filed) to identify.
So it should work.
0 -
I don't think you get what I mean I want to allow all SSL/TLS traffic but drop traffic without extension server_name because the USG can't know what its for.
0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 153 Nebula Ideas
- 99 Nebula Status and Incidents
- 5.7K Security
- 278 USG FLEX H Series
- 277 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 395 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 75 Security Highlight