HTTPS Inspection Bypass and Identity Awareness

[Gregory_Link]

Can anyone tell me if R80.30 or R80.40 support HTTPS Inspection Bypass in conjunction with source User and Machine Identities?  We are running R80.20 and have a need to selectively bypass some services but only for a subset of users/machines so wanted to know if upgrading to either of these versions would solve this need for us.

[Wolfgang]

@Gregory_Link 

This is possible. You can define https inspection rules with access-roles as source or destination.

[Gregory_Link]

Can I ask what versions currently support this functionality?

[Wolfgang · Accepted solution]

Good question, I don‘t remember from which version this was working. But because of some other problems with https inspection we upgraded all environments to R80.40 or higher if https inspection is used.

[PhoneBoy]

R80.40 moves the HTTPS Inspection policy into SmartConsole, which I believe also gives you more options in terms of what objects can be used in the policy.

[_Val_]

With R80.40 and up, both management and GWs, you can use Access Roles in HTTPSi policy, but not in R80.30 and below