• SonicOS 7.1
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• About DPI-SSH
  • Supported Clients/Servers and Connections
  • Supported Key Exchange Algorithms
  • Caveats
• Configuring DPI-SSH
  • Activating Your DPI-SSH License
  • Managing DPI-SSH
    • Viewing Connection Status
    • Configuring Client DPI-SSH Inspection
    • DPI-SSH Blocking of Port Forwarding
    • Customizing Client DPI-SSH Inspection
• SonicWall Support
  • About This Document

Customizing Client DPI-SSH Inspection

By default, when DPI-SSH is enabled, it applies to all traffic on the firewall. You can customize to which traffic DPI-SSH inspection applies in the Inclusion/Exclusion section.

To customize DPI-SSH client inspection

1. Go to the Inclusion/Exclusion section of the POLICY | DPI-SSH > Settings page.

   

2. From the Address Object/Group Exclude and Include drop-down menus, select an address object or group to exclude or include from DPI-SSH inspection. By default, Exclude is set to None and Include is set to All.
3. From the Service Object/Group Exclude and Include drop-down menus, select an address object or group to exclude or include from DPI-SSH inspection. By default, Exclude is set to None and Include is set to All.
4. From the User Object/Group Exclude and Include drop-down menus, select an address object or group to exclude or include from DPI-SSH inspection. By default, Exclude is set to None and Include is set to All.
5. Click Accept.