• SonicOS 7.0
• About DPI-SSH
  • Supported Clients/Servers and Connections
    • Supported Key Exchange Algorithms
    • Caveats
    • Configuring DPI-SSH
  • Activating Your DPI-SSH License
  • Managing DPI-SSH
    • Viewing Connection Status
    • Configuring Client DPI-SSH Inspection
    • DPI-SSH Blocking of Port Forwarding
    • Customizing Client DPI-SSH Inspection
• SonicWall Support
  • About This Document

Customizing Client DPI-SSH Inspection

By default, when DPI-SSH is enabled, it applies to all traffic on the firewall. You can customize to which traffic DPI-SSH inspection applies in the Inclusion/Exclusion section.

To customize DPI-SSH client inspection

1. Go to the Inclusion/Exclusion section of the POLICY | DPI-SSH > Settings page.

   

2. From the Address Object/Group Exclude and Include drop-down menus, select an address object or group to exclude or include from DPI-SSH inspection. By default, Exclude is set to None and Include is set to All.
3. From the Service Object/Group Exclude and Include drop-down menus, select an address object or group to exclude or include from DPI-SSH inspection. By default, Exclude is set to None and Include is set to All.
4. From the User Object/Group Exclude and Include drop-down menus, select an address object or group to exclude or include from DPI-SSH inspection. By default, Exclude is set to None and Include is set to All.
5. Click Accept.