Smoothwall - how to add a site to not require the certificate?

[snagrat]

I need to allow our Cambium Access Point to communicate with cloud.cambiumnetworks.com. I need to add this URL to be excluded from HTTP inspection as the APs won't have the certificate on.

 

Do I just add the URL to the Exception URLs category? Currently there is nothing in the category as this is a new install.

[5tu]

Yes that’s right. Or add it into a new custom category and create a new https inspection policy to not filter your customer category.

[dapaulio]

For things like ap and what we done for interactive tvs is option 3 however I would either

- if your on a flat network then yes you could do it that way.

- alternative create a location with all the ip addressses of the aps and create a https inspection rule for the location created set not do not inspect. This way you can tie down the filtering on the location also to only access certain sites related to the ap (interactive tv etc)

- another option is to Vlan the ap on to their own ip range. You can create a location that includes that range then create an inspection rule do not inspect and I filtering rule

Edited March 2, 2025 by dapaulio

[tom_newton]

Bear in mind that you will only be able to do this by domain (as until we mitm we don't have any URL data)

[snagrat]

Bear in mind that you will only be able to do this by domain (as until we mitm we don't have any URL data)

 

If I add a URL in the list though, will it take the domain from that? Or should I just enter the domain

[tom_newton]

Just add the domain. As otherwise the smoothie is gonna look at the URL and say "I cant be that discriminant, I wont match"