QUESTION - SSL/TLS policy order

Update, created all the rules again after a false start with s failed website. None of the SSL/TSL rules show any traffic. The firewall rule shows traffic.

Ian

Thats a known issue with the "none traffic shown in the Rule". 

You can drag reorder using the grabber on the left (left of the checkbox).  This is the same as ordering firewall rules.

The two exception rules are always on top.

In EAP1 the TLS rules do not show any traffic.  This is not a bug, it is feature not yet complete and is scheduled to come in a later EAP.

Bandwidth will be in EAP3.

Hi Michael,

thank you for those explanations.

I will be a  little picky though, without data throughput being displayed I find debugging the rules very difficult eg which rule is passing the traffic, is the rule I setup working?

I am trying to use the SSL/TLS inspection on my IoT devices.

Ian

I understand, and it is a an absolute must have for the final v18 product.

If you were part of the threads all asking for "when is v18 coming" you can understand that there is a push to get the EAP into the communities hands as quickly as possible, balanced against getting enough of the features done and the quality bar high enough.  This was a feature that could go to EAP1 without as it is more about reporting and debugging.

I don't know if it helps, but the the Policy Tester has been updated to include all the SSL/TLS stuff (I think EAP1 has it).  Its not real traffic, but it if you know what your traffic looks like it should work.

I understand, and it is a an absolute must have for the final v18 product.

If you were part of the threads all asking for "when is v18 coming" you can understand that there is a push to get the EAP into the communities hands as quickly as possible, balanced against getting enough of the features done and the quality bar high enough.  This was a feature that could go to EAP1 without as it is more about reporting and debugging.

I don't know if it helps, but the the Policy Tester has been updated to include all the SSL/TLS stuff (I think EAP1 has it).  Its not real traffic, but it if you know what your traffic looks like it should work.