Wildcard SSL

camkim_MDEA — Wed, 19 Jan 2011 16:35:06 GMT

So we have a couple hosts where we use a Wildcard SSL and I noticed that in our URL filtering, it shows up as *.domain.com (application SSL) rather than service1.domain.com and service2.domain.com

I've been trying to troubleshoot an issue where we use a whitelist for a certain business unit and we have service1.domain.com listed in the access URL list, but they keep getting dropped. Is the short term solution just to add *.domain.com to get around this issue?

Long term, I would think there has to be a differen solution, considering how prevalent Wildcard SSL cert are today.Just our organization alone, we probably will have 20 hosts, all using the same certificate. We need to be able to identify the traffic by the correct URL.

Re: Wildcard SSL

camkim_MDEA — Sun, 23 Jan 2011 00:05:41 GMT

for the whitelist, I ended up just adding the url *.domain.com to allow connections to wildcarded SSL hosts to work.

However, I think PAN should work on a better method of identifying the actual URL, rather than the listing the wildcard SSL in the logs.

topic Re: Wildcard SSL in General Topics

Wildcard SSL

Re: Wildcard SSL