[Dr.WoW]Q&A:How can I configure HTTPS URL filtering?

A: URL filtering applies only to HTTP or HTTPS URL requests at a time. To filter HTTPS URL requests, you also need to configure SSL-encrypted traffic detection or encrypted traffic filtering of URL filtering.

• Configure SSL-encrypted traffic detection.

1. Create the URL filtering profile.
2. Enable the function of filtering encrypted traffic to perform URL filtering on encrypted HTTPS traffic.
3. Configure a security policy and reference the URL filtering profile.

• Configure encrypted traffic filtering of URL filtering.

1. Configure the SSL decryption certificate and import the trusted certificate to the intranet PC.
2. Import the CA certificate of the certificate authority trusted by the enterprise and specify the imported CA certificate as the server CA certificate. The FW checks whether the server certificate is trusted based on the server CA certificate.
3. Configure the detection profile and SSL-encrypted traffic detection policy.

For details, see the  HUAWEI USG6000, USG9500, and NGFW Module Product Documentation.

Step 1   Log in to the enterprise technical support website at http://support.huawei.com/enterprise.

Step 2   Click Security.

Step 3   Click the name of the product to be queried, for example, Secospace USG6600 Series.

Step 4   Choose Documentation> ALL Documents, and then select the corresponding product documentation.

Step 5  Find the Configuring HTTPS URL Filtering node in the administrator's Guide.