HTTPS

This page is displayed only when HTTPS is enabled on Configure > My Proxy > Basic > General


HTTPS Proxy Server Port	Specifies the port that Content Gateway uses when acting as a Web proxy server for HTTPS traffic. The default value is 8080. See also, Configure > Protocols > HTTP > General: HTTPS Ports.
Tunnel Skype	Enables/disables the tunneling of Skype traffic when HTTPS is enabled and Content Gateway is an explicit proxy. To complete the configuration, you must ensure that all users who are allowed to use Skype have a Filtering policy that permits internet telephony. This is required regardless of whether Skype is used with HTTPS enabled or not. Also, if Skype is not prevented, after the handshake it will route traffic over a non-HTTP port. To force Skype traffic to go through Content Gateway, a GPO should be used, as described in the Skype IT Administrators Guide. Note: This option is not necessary if HTTPS is not enabled. Note: This option is not valid when Content Gateway is a transparent proxy.
Tunnel Unknown Protocols	Enables and disables tunneling of HTTPS requests when the SSL handshake results in an unknown protocol error. Tunneled connections are not decrypted or inspected. When Content Gateway is an explicit proxy, a URL lookup is performed and policy is applied before the SSL connection request is made with the server. Therefore, tunneled transactions appear in the TRITON AP-WEB transaction log. When Content Gateway is a transparent proxy, if there is an SNI a URL lookup is done on the hostname in the SNI. Otherwise no URL lookup is possible and tunneled transactions are not logged. This is because an initial connection with the server is required to get the Common Name from the SSL certificate. It is used for the URL lookup. If the connection handshake fails and this option is enabled, the connection is tunneled without the proxy being aware of it. Important: This setting persists after the HTTPS feature is disabled (on Configure > My Proxy > Basic > General). Therefore, disable this option before disabling HTTPS support.