Excluding guest wlan from SSL Inspection

Spielkulutur

Hello,

our guest-wlan should not be screened by SSL inspection. In the settings I have only found how I can assign the SSL inspection to LAN1 etc. My AP is connected to LAN 1. It sends the normal wifi for the employees and a separate guest-wlan via VLAN. Can I somehow specify that the SSL inspection should not interfere with the VLAN of the guest-wlan or solve it differently? Thanks a lot !

Kind Regards,

Tim Masin

jasailafan

Hi Spielkulutur,

If the guest-wlan is vlan created based on lan1 and zone LAN1, try to add a security policy with the source address of vlan and apply CF profile only and no SSL inspection to this security policy rule.

Zyxel_Cooldia

@jasailafan , thanks for sharing.😀

Hi @Spielkulutur ,

Welcome to Zyxel community. 😎

You need to create an address object so that you can select source address on security policy.

         

“CONFIGURATION > Object > Address/Geo IP”.

jasailafan

Hi Spielkulutur,

If the guest-wlan is vlan created based on lan1 and zone LAN1, try to add a security policy with the source address of vlan and apply CF profile only and no SSL inspection to this security policy rule.

Spielkulutur

Hello jasailafan,

thanks for your answer !

I have tried it but the problem is that i can´t choose VLAN in the Pv4 Source.

Zyxel_Cooldia

@jasailafan , thanks for sharing.😀

Hi @Spielkulutur ,

Welcome to Zyxel community. 😎

You need to create an address object so that you can select source address on security policy.

         

“CONFIGURATION > Object > Address/Geo IP”.

Spielkulutur

Hi Zyxel_Cooldia,

thank you very much it worked !