Adding Custom Common Names

To add a custom common name

1. Navigate to the POLICY | DPI-SSL > Client SSL.
2. Click Common Name.

3. Scroll to Common Name: Exclusions/Inclusions.

   

   You can control the display of the common names from the View drop-down menu:

   All	Displays all common names.
   Default	Displays the default common names (excludes Custom).
   Custom	Displays only common names you have added.

4. Click +Add icon to add a custom common name.

   

5. Add one or more common names in the field.

   Separate multiple entries with comma or newline characters.

6. Specify the type of Action:

   • Exclude (default)
   • Skip CFS Category-based Exclusion
   • Skip authenticating the server to opt out of authenticating the server for this domain if doing so results in the connection being blocked. Enable this option only if the server is a trusted domain.

7. Select an option from the Always authenticate server before applying exclusion policy drop-down menu to Enable or Disable use of dynamic exclusion cache (both server IP and common-name based).

   Use Global Setting is selected by the default.

   DPI-SSL dynamically determines if a connection should be intercepted (included) or excluded, based on policy or configuration. When DPI-SSL extracts the domain name for the connection, exclusion information is readily available for subsequent connections to the same server or domain.

8. Click Accept.

   The Common Name Exclusions/Inclusions table is updated, with Custom in the Built-in column.

   Hover over the Information icon to see which custom attributes were selected. If a common name was added through the Connection Failure List, the Information icon indicates the type of failure:

   • Skip CFS category exclusion
   • Skip Server authentication
   • Failed to authenticate server
   • Failed Client handshake
   • Failed Server handshake
9. Click Accept.