search cancel

How to Disable SSL Detection or Protocol Detection for Web sites/Domains in VPM

book

Article ID: 173956

calendar_today

Updated On:

Products

Advanced Secure Gateway Software - ASG Secure Web Gateway Virtual Appliance ProxySG Software - SGOS

Issue/Introduction

How do we write Rule in Visual Policy Manager to disable protocol Detection for Web site or Client IP Address , If you do not want to add a rule in CPL Layer.

Resolution

To Disable SSL Detection , You can create a rule in VPM in Web Access Layer

  1. Create New Web Access Layer
  2. Add new Rule , You can add Source object [Combined Source] and Destination objects [Combined Destination] accordingly, Under Action (right click) --> Set --> New ---> Disable SSL Detection ---> Select Option "Traffic Tunneled over:" Select "HTTP Connect, SOCKS, TCP" ---> click OK --> Install Policy

Note 1 - This is only applicable for Explicit Deployments.

Note 2 - Why doesn't a detect_protocol(no) rule work for some sites or applications when applied in the VPM? More information can be found in TECH243402