Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 31 subscribers
  • Views 1202 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Anyone have a good list that's been developed for TLS Exclusion?

DBASQL

I think there will be many more domains that need to be added to the TLS bypass. If you have already been through this pain please share!

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    Thanks for the replies! I have only done a test group so and that seems to work well. I was just thinking of all the possibilities here and trying to gauge how bad this is going to be. Are users constantly asking at the beginning that kind of thing.
    I seems using the self signed cert is more beneficial for long term now that "real" certs have to be changed out so frequently. Is that the method most are using?

    Based on what Bill is saying we are in the know on the DPI engine having problems? I def cannot knowingly activate this if there are known issues with sites dropping or similar. Honestly it seems like such a huge undertaking that I am not surprised.


    Following restrictions announced by Apple about improving security on the web, the international regulation of SSL certificates is changing. The Certificate Authorities (CA) have agreed to reduce the lifetime of an SSL certificate to 12 months maximum. This measure will take effect September 1, 2020.

Reply
  • 0

    Thanks for the replies! I have only done a test group so and that seems to work well. I was just thinking of all the possibilities here and trying to gauge how bad this is going to be. Are users constantly asking at the beginning that kind of thing.
    I seems using the self signed cert is more beneficial for long term now that "real" certs have to be changed out so frequently. Is that the method most are using?

    Based on what Bill is saying we are in the know on the DPI engine having problems? I def cannot knowingly activate this if there are known issues with sites dropping or similar. Honestly it seems like such a huge undertaking that I am not surprised.


    Following restrictions announced by Apple about improving security on the web, the international regulation of SSL certificates is changing. The Certificate Authorities (CA) have agreed to reduce the lifetime of an SSL certificate to 12 months maximum. This measure will take effect September 1, 2020.

Children
No Data