The SSL certificate fingerprint object must be used when using SSL decryption feature.
It allows you to perform an operation (deny,allow, use a specific outgoing address) using an SSL certificate fingerprint (sha1)
You can get and extract a SSL fingerprint from https://iplocation.io/ssl-certificate-fingerprint
- When addin a new object in your ACL rule, find the word SSL and choose the “SSL Certificate fingerprint” object
When adding an item, you have 2 ways:
- Add the fingerprint directly in the hostname field.
- Add the hostname and port is you did not know what is the fingerprint. Artica will try to retreive it itself.
