Selecting SSL proxy enabled Sites and SSL Servers

The SSL Proxy and SSL Server frame enables you to select the SSL proxy enabled sites and SSL servers.

The left part of the frame is used to select the SSL proxies:

1 Click Add and select the Sites you want to enable by pushing them to the right with the single arrow pointing to the right (the double arrow icon can be used to select all the Sites in one click).
2 Select 'Enabled' as Administrative State and click OK.

The selected Sites appear with a green status sign in the State column.

All Appliances that belong to these Sites (and only those) will be able to proxy SSL flows. All the Sites hosting enabled SSL servers should be on that list.

If you want to optimize traffic to the Cloud, the Site where your gateway is hosted should also be listed.

Note: You may select Sites you do not want to be SSL proxies, by selecting 'Disabled' in the Administrative State field. These Sites are tagged with a grey status sign in the State column.


3 You can select the declared Sites (enabled or disabled) by checking them or by using the selection menu:

You can perform the following operations:

• reversing the selection
• enabling or disabling the selected Sites
• removing the selected Sites
4 Click the Update button in the upper right corner of the page to validate your settings.
5 By right-clicking one or several Sites, you can use the Show Status function to display an SSL status summary of their appliances:

The right part of the frame is used to select SSL servers:

1 Click Add.
2 In the 'New SSL Server' dialog box, enter:
• either the SSL Server IP V4 address, followed by the port number if needed (example: 1.1.1.1:123)
• or the SSL Server common name (example: *.extremenetworks.*)
3 Select the 'Enabled' option as Administrative State.
4 Click OK.

All the operations available for SSL Proxies can also be used with SSL Servers.

All the flows to these SSL Servers can be deciphered and optimized by the Appliance before being re-ciphered and forwarded.

Note: You may select SSL Servers you do not want to decipher nor optimize, by selecting 'Disabled' in the Administrative State field. These Servers are tagged with a grey status sign in the State column.