Bypassing verification

Use the Configure > SSL > Validation > Verification Bypass page to allow users to visit a site when certificate verification fails.

Select Permit users to visit sites with certificate failure after confirmation to enable users to proceed to a site after they have been informed that the site has an invalid certificate. This is referred to as verification bypass. If this check box is not selected, users do not have the option to browse to the site.

If verification bypass is enabled, you can specify a period of time, in minutes, that the user is allowed to bypass a particular site without having to click-through the warning again. Specify that period in the Time before the user is notified again for the site entry field. The default is 6 minutes.

Select Enable the SSL session cache for bypassed certificates to store information about bypassed certificates in cache and reuse the connections.

If this option is selected, performance is better, but not all users are notified that they are trying to access a site where verification has failed.

If this option is not selected, all users are notified about sites that do not have valid certificates, but performance is not as fast.