topic URL filter validation on Fresh installation of R81.10 in General Topics

URL filter validation on Fresh installation of R81.10

andersplarsson — Thu, 07 Sep 2023 14:04:19 GMT

Hi,

Just want to know what these commands shows on a fresh installation of R81,10:

fw ctl get int appi_urlf_ssl_cn_perform_hold_for_cert_validation

fw ctl get int urlf_use_sni_for_categorization

I have an upgraded version (from 80.30) and have this configured:

appi_urlf_ssl_cn_perform_hold_for_cert_validation = 0

urlf_use_sni_for_categorization = 1

Wonder if that is a leftover from R80.30 or if that is the actual "default" setting.

Regards,

Anders

Re: URL filter validation on Fresh installation of R81.10

the_rock — Thu, 07 Sep 2023 14:08:49 GMT

You got it, it is default.

Andy

[Expert@quantum-firewall:0]# fw ctl get int appi_urlf_ssl_cn_perform_hold_for_cert_validation
appi_urlf_ssl_cn_perform_hold_for_cert_validation = 0
[Expert@quantum-firewall:0]# fw ctl get int urlf_use_sni_for_categorization
urlf_use_sni_for_categorization = 1
[Expert@quantum-firewall:0]#

Re: URL filter validation on Fresh installation of R81.10

the_rock — Thu, 07 Sep 2023 14:14:37 GMT

Btw, tested on R80.40, R81.10, R81.20, its exact same thing 🙂

Re: URL filter validation on Fresh installation of R81.10

andersplarsson — Thu, 07 Sep 2023 14:15:51 GMT

Ok, big thanks for the quick reply on my question.

Regards,

Anders

Re: URL filter validation on Fresh installation of R81.10

the_rock — Thu, 07 Sep 2023 14:16:58 GMT

Glad we can help mate.

Have a nice day, afternoon or evening 🙂

Andy