What are the different levels of HTTPS filtering?


This article applies to:

  • R3000/WF/WFR

Question:

What are the different levels of HTTPS filtering?

Reply:

When HTTPS filtering is enabled, the Filter will attempt to identify and validate the secure server certificate in HTTPS requests, depending on the selected filtering level under System> Control> Filter>HTTPS Filtering:

  • “None” - if you do not want  to filter HTTPS sites.
     
  • “Low” - if you want the R3000 to filter HTTPS sites without having to communicate with IP addresses or hostnames of HTTPS servers.
     
  • “Medium” - if you want the R3000 to communicate with HTTPS servers in order to get the URL from the certificate for URL validation only (this is the default setting).
     
  • “High” - if you want the R3000 to communicate with HTTPS servers to obtain the certificate with a very strict validation of the return URL. WARNING: If using the “High” setting, end users may be blocked.

The following video recaps the content of this article and provides additional information regarding HTTPS filtering.

This article was previously published as:
8e6 KB 276475

Last Modified 5/2/2013.
https://support.trustwave.com/kb/KnowledgebaseArticle12301.aspx