About roma

Hi All, We use SSL inspection and sometimes we have to add websites to a custom url category for non inspection so the webpage can become visible. Is there an option to have the user presented with a webpage so IT staff will know that it's ssl inspection that is not allowing the webpage to be viewed? I've looked but couldn't find any. Usually when an application (cloud based or a website) is having issues I have to check the firewall logs in decryption to see if it's SSL inspection issue. It would be much easier if the firewall could just present a page to the user that I could see and know right anyway its an ssl inspection issue, instead of going through logs etc. Thanks! ... View more

Hello, I have two 3200 series firewalls (different models though). How can I copy a custom URL category from one firewall to the other one? Thanks. ... View more

I would like to receive email alerts on certain system events, such as when there is a successful login and unsuccessful login attempt from GUI and CLI. (Among other events). The filter for the stem log is looking for certain "strings" or "attributes" Andi have no idea where to find them. Any ideas? Thanks. ... View more

Hello, On my "no-decrypt" policy - I couldnt find a way to exclude only a specific site from having an untrusted CA issuer. The only way to solve the problem and to be able to connect the device on our LAN to the website was to uncheck the box on the no-decrypt profile " Block sessions with untrusted issuers" - but now that opens up all of them. ... View more

Hi All, I'm using SSL decryption and if I wanted to have a URL in the exceptions (not decrypted) list, I would add it to a custom url category I created and just add the domain and apply the cutom url to the policy. But I also noticed that in Device>Certificate Management>SSL decryption exclusion - there are many predefined domains that seem to not be decrypted. If this is the case, why do they have that listed under certificates? If I add a url to the custom url category I created or the one in certificates, is it the same thing? Thanks. ... View more