ssl-cert

SSL certificate for SSL interception.

string

Maximum length: 35

ssl-ca-cert

SSL CA certificate for SSL interception.

string

Maximum length: 35

fast-policy-match

Enable/disable fast matching algorithm for explicit and transparent proxy policy.

option

-

proxy-fqdn

Fully Qualified Domain Name to connect to the explicit web proxy.

string

Maximum length: 255

max-request-length

Maximum length of HTTP request line .

integer

Minimum value: 2 Maximum value: 64

max-message-length

Maximum length of HTTP message, not including body .

integer

Minimum value: 16 Maximum value: 256

strict-web-check

Enable/disable strict web checking to block web sites that send incorrect headers that don't conform to HTTP 1.1.

option

-

forward-proxy-auth

Enable/disable forwarding proxy authentication headers.

option

-

forward-server-affinity-timeout

Period of time before the source IP's traffic is no longer assigned to the forwarding server .

integer

Minimum value: 6 Maximum value: 60

max-waf-body-cache-length

Maximum length of HTTP messages processed by Web Application Firewall .

integer

Minimum value: 10 Maximum value: 1024

webproxy-profile

Name of the web proxy profile to apply when explicit proxy traffic is allowed by default and traffic is accepted that does not match an explicit proxy policy.

string

Maximum length: 63

learn-client-ip

Enable/disable learning the client's IP address from headers.

option

-

learn-client-ip-from-header

Learn client IP address from the specified headers.

option

-

learn-client-ip-srcaddr <name>

Source address name (srcaddr or srcaddr6 must be set).

Address name.

string

Maximum length: 79