Configuring encrypted connections scan in the Web Console

In the Web Console, you can configure settings for encrypted connections scans in the policy properties (Application settingsGeneral settingsNetwork settings).

Encrypted connections scan settings

Setting

Description

Encrypted connections scan is enabled / disabled

This toggle switch enables or disables the encrypted connections scan.

This toggle switch is turned on by default.

Trusted root certificates

Clicking Manage trusted root certificates opens the Trusted root certificates window, in which you can configure the list of trusted certificates. Trusted certificates are used when performing an encrypted connections scan.

Visiting a domain with an untrusted certificate

You can select the action that the application performs when a domain with an untrusted certificate is visited:

  • Allow (default value) — Allow connecting to the domain with an untrusted certificate.
  • Block — Block connection to the domain with an untrusted certificate.

Visiting a domain with an encrypted connections scan error

You can select the action that the application performs when a domain with an encrypted connections scan error is visited:

  • Allow and add domain to exclusions (default value) — Add the domain that resulted in the error to the list of domains with scan errors and do not scan encrypted network traffic when this domain is visited.
  • Block — Block connection to the domain with a scan error.

Certificate verification policy

You can select how the application verifies certificates:

  • Local check: the application does not use the internet to validate a certificate.
  • Full check (default value): the application uses the Internet to check and download the missing chains that are required to validate a certificate.

Trusted domains

Clicking Configure trusted domains opens the Trusted domains window, in which you can configure the list of trusted domain names.

Monitor all network ports

If this option is selected, the application monitors all network ports.

Monitor selected network ports only

If this option is selected, the application monitors only the network ports specified in the Monitored ports window.

This option is selected by default.

Monitored ports

Clicking the Configure network port settings link opens the Monitored ports window, where you can specify the network ports to be monitored by the application.

Page top