Hello,
I'm testing the new features of V18 and there is one thing I don't understand.
If I uncheck all web securities on a firewall rule that matches for an IP host, the SSL decryption even decrypts and blocks traffic for unsecure SSL sites...
A I missing something?
Thanks.
Thank you for your answer, I understand the way it works now.
But there is a bug the way SSL/TLS Inspection rules work.
If you specify an IP host group in the "source networks and devices", AND this IP host group is empty, then, ALL the traffic from any sources (even if they should not match this rule) will hit this rule. And then, if I add a host in the IP host group, only this IP host will hit this rule, and all of the other sources won't hit this rule and will hit the rules below this one, and everything works fine.
The bug is only when the IP host group is empty as source.
