White Paper - URL Filtering using SNI for HTTPS websites

[_Val_]

Author

@Kevin_Jones 

Abstract

The document describes how to leverage Server Name Indication (SNI) when using URL Filtering Software Blade.

For the full list of White Papers, go here. 

[Raj_Khatri]

After upgrading gateways to R81.10, I am now able to see HTTPS site URLs under the 'SNI' column.  These are being hit on the firewall blade without HTTPS inspection enabled.

Any ideas how to create a view for showing the SNI field as there isn't an option in the table settings field?

[CheckPointerXL]

Hey Guys,

we know that Light HTTPS inspection relies on SNI indication to categorize websites. 

my question is: which field captured by Full HTTPS Inspection will lead to a "more accurate" (in some cases) classification?

and which future for Light HTTPS Inspection about TLS 1.3 with encrypted SNI ?

ty

[PhoneBoy]

Full HTTPS Inspection will give you the full URL, which leads to more accurate classification.
I believe the only way to support Encrypted SNI is to do full HTTPS Inspection, but could be wrong about that.