Secure Computing SSL Scanner User Manual download pdf (Page 168)

SSL Scanner

If the Common Name in a certificate is, e. g. abcde.com, but the Web

server’sURLisinfactwww.abcde.com, no match is achieved.

• Wildcard matches host name

Compares the wildcard used in a certificate to represent a Common Name

to the host name. So, e. g. the wildcard expression *.ccc.de matches

www.ccc.de.

If a match is achieved, the configured action will be executed.

• Certificate is expired for more than ... days

Checks if a certificate has expired. If more than the number of days config-

ured here have elapsed since expiration of the certificate, the configured

action will be executed. A grace period may allow the use of the certificate

even after it has expired.

Enter the desired number of days in the input field provided with this option.

• Certificate is revoked

Checks if a certificate has been revoked. For this purpose, the Certificate

Revocation List (CRL) is used. If the certificate has been revoked, the

configured action will be executed.

• Revocation status is unresolvable

The reason why the revocation status is unresolvable could be that the cor-

responding certificate authority or the path leading to the Certificate Revo-

cation List (CRL) is not known.

4.4

Scan Encrypted Traffic

The Scan Encrypted Traffic options are invoked by clicking on the corre-

sponding button under SSL Scanner:

If you want to enable any of these options, mak

e sure the checkbox on this

button is also marked. The checkbox is marked by default.

After modifying the setting of this checkbox, click on Apply Changes to make

the modification effective.

These are policy-dependent options, i. e. they are configured for a particular

policy. When you are configuring these options, you need to specify this policy.

4–8

1 2 ... 163 164 165 166 167 168 169 170 171 172 173 ... 190 191

No comments

Secure Computing SSL Scanner User Manual Page 168