Install A Ca Certificate In A Browser - ZyXEL Communications USG40 User Manual

Table 200 Configuration > UTM Profile > SSL Inspection > Exclude List (continued)
LABEL
Exclude List of
Certificate
Identity
Apply
Reset

30.3.1 Install a CA Certificate in a Browser

Certificates used in SSL Inspection profiles should be installed in user web browsers. Do the
following steps to install a certificate in a computer with a Windows operating system (PC). First,
save the certificate to your computer.
Run the certificate manager using certmgr.msc.
1
Go to Trusted Root Certification Authorities > Certificates.
2
Chapter 30 SSL Inspection
DESCRIPTION
SSL traffic to a server to be excluded from SSL Inspection is identified by its certificate.
Identify the certificate in one of the following ways:
• The Common Name (CN) of the certificate. The common name of the certificate can
be created in the Object > Certificate > My Certificates screen.
• Type an IPv4 or IPv6 address. For example, type 192.168.1.35, or
2001:7300:3500::1
• Type an IPv4/IPv6 in CIDR notation. For example, type 192.168.1.1/24, or
2001:7300:3500::1/64
• Type an IPv4/IPv6 address range. For example, type 192.168.1.1-192.168.1.35, or
2001:7300:3500::1-2001:7300:3500::35
• Type an email address. For example, type abc@zyxel.com.tw
• Type a DNS name or a common name (wildcard char: '*', escape char: '\'). Use up to
127 case-insensitive characters (0-9a-zA-Z`~!@#$%^&*()-_=+[]{}\|;:',.<>/?). '*'
can be used as a wildcard to match any string. Use '\*' to indicate a single wildcard
character.
Alternatively, to automatically add an entry for existing SSL traffic to a destination server,
go to Monitor > UTM Statistics > SSL Inspection > Certificate Cache List, select an
item and then click Add to Exclude List. The item will then appear here.
Click Apply to save your settings to the ZyWALL/USG.
Click Reset to return to the profile summary page without saving any changes.
ZyWALL/USG Series User's Guide
500