• SonicOS 7
• About DPI-SSL
  • Using DPI-SSL
    • Supported Features
    • Support for Local CRL
    • TLS Certificate Status Request Extension
    • Blocking of SSH X11 Forwarding
    • Support for ECDSA-Related Ciphers
    • DPI-SSL and CFS HTTPS Content Filtering Work Independently
    • Original Port Numbers Retained in Decrypted Packets
    • Security Services
  • Deployment Scenarios
  • Proxy Deployment
  • Customizing DPI-SSL
  • Connections per Appliance Model
• Configuring the DPI-SSL/TLS Client
  • Decryption Services > DPI-SSL/TLS Client
  • Viewing DPI-SSL Status
  • Deploying the DPI-SSL/TLS Client
    • Configuring General Settings
      • Enabling SSL Client Inspection
      • Enabling DPI-SSL Client on a Zone
      • Enabling DPI-SSL Server on a Zone
    • Selecting the Re-Signing Certificate Authority
      • Adding Trust to the Browser
    • Configuring Exclusions and Inclusions
      • Excluding/Including Objects/Groups
      • Excluding/Including by Common Name
        • Viewing Status of DPI SSL Default Exclusions
        • Excluding/Including Common Names
        • Deleting Custom Common Names
        • Showing Connection Failures
        • Updating Default Exclusions Manually
      • Specifying CFS Category-based Exclusions/Inclusions
      • Client DPI-SSL Examples
        • Content Filtering
        • App Rules
• Configuring DPI-SSL/TLS Server Settings
  • Decryption Services > DPI-SSL/TLS Server
  • About DPI-SSL/TLS Server Settings
    • Configuring General DPI-SSL/TLS Server Settings
    • Configuring Exclusions and Inclusions
    • Configuring Server-to-Certificate Pairings
• SonicWall Support
  • About This Document

DPI-SSL and CFS HTTPS Content Filtering Work Independently

DPI-SSL and CFS HTTPS content filtering can be enabled at the same time and function as follows:

• If DPI-SSL Client Inspection is disabled, Content Filter Service filters HTTPS connections.
• If DPI-SSL Client Inspection is enabled, but the Content Filter option is not selected, Content Filter Service filters HTTPS connections.
• If DPI-SSL Client Inspection is enabled and the Content Filter option is selected, CFS does not filter HTTPS connections.