-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
How to Exclude Google Drive from Client DPI-SSL in the new DPI-SSL Enhancement in SonicOS 6.2.5
10/29/2024 
370 People found this article helpful
486,192 Views
Description
The Google Drive app like many other such applications uses certificate pinning and due to this when SonicWall Client DPI-SSL is enabled, Google Drive will fail to connect.
In firmware prior to SonicOS 6.2.5.x, Google Drive cannot be excluded from Client DPI-SSL due to the following reasons:
- Google Drive CN is *.google.com and excluding this from Client DPI-SSL will also exclude other Google services like Gmail, YouTube.
- Google Drive IP addresses are shared by other Google services and therefore excluding it would exclude other such services.
In SonicOS 6.2.5.x firmware, with its DPI-SSL enhancements, it is now possible to exclude or include domains using either the Server Name present in the Server Name Indication (SNI) of the Client Hello or by domain names present in the SAN extension of the Certificate.
This KB article describes how to exclude Google Drive from DPI-SSL inspection without affecting content decryption and inspection of other Google services.
Resolution
- Login to the SonicWall management portal.
- Navigate to the Common Name tab.
- Click Add.
- Enter the following Common Names:
- accounts.google.com
- clients3.google.com
- drive.google.com
- www.googleapis.com
- Set Action to Exclude
- Click OK.
Testing
From a host behind the SonicWall, start the Google Drive app. It must be able to connect and sync.
Related Articles
- How to Block Google QUIC Protocol on SonicOSX 7.0?
- How to block certain Keywords on SonicOSX 7.0?
- How internal Interfaces can obtain Global IPv6 Addresses using DHCPv6 Prefix Delegation
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO