Chapter 20: Enabling HTTPS Scanning
117
C
HAPTER
20:
E
NABLING
HTTPS S
CANNING
If your site will be using HTTPS scanning, you must perform the following tasks:
•
Defining an HTTPS Policy
•
Defining a Rule in an HTTPS Policy
•
Defining Conditions in an HTTPS Rule
•
Configuring and Certifying HTTPS
Defining an HTTPS Policy
HTTP Policies define which HTTPS sites are fully bypassed, which are inspected, which request user
approval to continue, and which are blocked. The blocking mechanism is based on Black Lists, URL
categorization, and checking to see if Certificates have errors or comply with validation criteria.
You can customize both a regular HTTPS policy and an HTTPS Emergency policy.
Â
To define an HTTPS Policy
1. Select
Policies
Æ
HTTPS
.
2. Do one of the following:
• To create a policy from scratch, right click the
Policies
root node in the tree, and choose
Add
Policy
.
• To duplicate an HTTPS policy, right click the policy in the tree that you want to duplicate, and
choose
Duplicate
Policy
.
• To edit an HTTPS policy that you previously created from scratch or created by duplicating,
select the policy in the tree, and then in the main window, click the
Edit
button.
The Policy Definition is displayed in the main window.
3. Enter a name for the policy.
4. Add or modify the policy description as needed. The description is optional.
IMPORTANT:
HTTPS
must
be
licensed
at
your
site
in
order
for
you
to
enable
HTTPS
scanning.
NOTE:
You
cannot
edit
a
pre
supplied
HTTPS
Policy.
However,
you
can
duplicate
such
a
policy
and
edit
the
duplicate;
you
can
also
create
an
HTTPS
policy
from
scratch.