ZyXEL ZyWALL ATP700 User Guide - Page 631

Chapter 32 SSL Inspection The following table describes the fields in this screen. Table 243 Configuration > Security Service > SSL Inspection > Profile LABEL DESCRIPTION General Settings Server Signed Certificate Key Mode Select how to validate clients accessing HTTPS websites through the Zyxel Device. The Zyxel Device must check that the client's certificate and public key are valid and were issued by a Certificate Authority (CA) listed in the Zyxel Device's list of trusted CAs. Choose RSA 1024 or RSA 2048. Profile Management Add Edit Remove References # Name Description CA Certificate Reference Action RSA is a public-key cryptosystem used for secure data transmission, where the encryption key is public and the decryption key is private. RSA 1024-bit key has approximately 80 bits of strength, while a RSA 2048-bit key has approximately 112 bits, so is stronger, but slower. Some clients such as those using iOS13 do not support RSA 1024. Click Add to create a new profile. Select an entry and click this to be able to modify it. Select an entry and click this to delete it. Select an entry and click References to open a screen that shows which settings use the entry. Click Refresh to update information on this screen. This is the entry's index number in the list. This displays the name of the profile. This displays the description of the profile. This displays the CA certificate being used in this profile. This displays the number of times an object reference is used in a profile. Click this icon to apply the entry to a security policy. Go to the Configuration > Security Policy > Policy Control screen to check the result. 32.2.1 Apply to a Security Policy Click the icon in the Action field to apply the entry to a security policy. Go to the Configuration > Security Policy > Policy Control screen to check the result. ZyWALL ATP Series User's Guide 631