Why the exclude list of SSL Inspection does not work

Options
Zyxel_Kevin
Zyxel_Kevin Posts: 981 image  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
in Other Topics

Question:

I would like to exclude the IP address of website to bypass ssl inspect.

(For example: www.test.com resovle to 1.1.1.1)

but it doesn't work.

image.png

Answer:

The IP address in exclude list is SAN(Subject Alternative Name) of certficate extension.

We recommend use the SNI or Domain CN as exclude list.

Categories

EnglishTiếng ViệtРусскийไทย中文（台灣）