This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to skip SSL Trust Check for all and any sites?

Hi all,

I would like to make a URL exception to allow all and any sites to skip the Certificate Trust Check / Certificate Date Check

Would I just add the matching url as 

^https://([A-Za-z0-9.-]*\.)?*\.com\.au/ 
^https://([A-Za-z0-9.-]*\.)?*\.com/

or maybe

^https://*\.com/


Thank you


This thread was automatically locked due to age.
Parents
  • Wow, why do you want this? It would be a huge security risk because every malicious site with faked certifikates would pass!?

    Perhaps you can tell us what's the reason behind this so we might get to another solution!?

    Anyway, if you want to cover every possible url you can use something like:
    ^https://([A-Za-z0-9-]+\.)*[A-Za-z0-9-]{2,}\.[A-Za-z]{2,}/

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Reply
  • Wow, why do you want this? It would be a huge security risk because every malicious site with faked certifikates would pass!?

    Perhaps you can tell us what's the reason behind this so we might get to another solution!?

    Anyway, if you want to cover every possible url you can use something like:
    ^https://([A-Za-z0-9-]+\.)*[A-Za-z0-9-]{2,}\.[A-Za-z]{2,}/

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Children
No Data