topic Re: R81.20 Inbound SSL inspection - custom applications are not working in Firewall and Security Management

R81.20 Inbound SSL inspection - custom applications are not working

Zolo — Mon, 19 May 2025 08:27:28 GMT

Hello,

Is it poosible to filter SNI sites with custom application?

Source: Any(Internet clients)
Destination: SNI host Public IP
Service: HTTPS
Custom Application: mydomain.com object (Contain: mydomain.com, No Regex)
Action: Inspect
Certificate: mydomain.com cert (Contain: CN=example.com, SAN DNS: mydomain.com)

I tried with regex as well, with no luck.

Br,
Zolo

Re: R81.20 Inbound SSL inspection - custom applications are not working

PhoneBoy — Mon, 19 May 2025 13:55:26 GMT

What version/JHF are you on?

As far as I know, this should work.
When you say "no luck" what is the exact behavior?
Please show screenshots of any log entries, behavior, etc (redact sensitive details).

Re: R81.20 Inbound SSL inspection - custom applications are not working

the_rock — Mon, 19 May 2025 19:46:40 GMT

100% it does work. I dont have access to my lab to test it for couple weeks, but if you can send error or some sort of log, would help.

Andy

Re: R81.20 Inbound SSL inspection - custom applications are not working

Zolo — Wed, 21 May 2025 16:48:09 GMT

In the customer's environment the version is R81.20 JHF T99

But I tried in CP Demo Point (where I also upgraded to the latest version both the management and the gateway) with the same result.
"no luck" I ment that the result was the same, not worked.

I try to fnd some time to reproduce and I will post logs and screenshots.

Re: R81.20 Inbound SSL inspection - custom applications are not working

Zolo — Wed, 21 May 2025 16:47:21 GMT

There is no error, simply do not match to that rule.
If I define an another rule with connection Bypass that rule matches.

I try to fnd some time to reproduce and I will post logs and screenshots.