CLI Configuration

To configure SFM CLI settings go to Device Configuration > System > Configuration > CLI Configuration.

IPS MAX Packets
Set IPS MAX Packets
Set number of packets to be sent for Application Classification.
  • All - pass all of the session packets for application classification
  • Default - pass first 8 packets of the session of each direction for application classification (total 16)
  • Value – any number between 8 and 65535

Route Precedence

Route List
  • Static System Routes
  • VPN Routes
Change the Order

Use Move Up & Move Down buttons to change the order of routes.

Note Do not forget to click Apply after changing the order.

HTTPS Unknown Protocol

Deny HTTPS Unknown Protocol

Select action for HTTPS unknown protocol.

Available options:

On : Deny invalid traffic through HTTPS port Off : Allow invalid traffic through HTTPS port

By default, it is On.

Note Do not forget to click Apply after changing the action.
HTTPS Certificate
Invalid HTTPS Certificate

If you enable HTTPS scanning, you need to import SSL Proxy certificate in Internet Explorer, Firefox Mozilla or any other browsers for decryption on SSL Inspection otherwise browser will always give a warning page when you try to access any secure site. “Invalid Certificate error” warning appears when the site is using an invalid SSL certificate. The device blocks all such sites. Allow or block access to such sites.

Note Do not forget to click Apply after changing the action.

Thin Client

Add

Click to add IP address of a Citrix server.

IP Address

List of added Citrix servers IP addresses.

Manage
Click to remove Citrix server.