policymgr interface ＜port-pair-name＞ ssl-intercept tcp port ＜port_number＞

Adds or deletes a TCP port on a network port pair for SSL interception.

Note

By default, port 443 is used as the TCP listener to check for incoming connection requests. The TCP listener receives secure HTTPS connections between the client and the back-end server on one port pair. You can specify a maximum of 8 TCP ports for SSL interception.

For details about how to add or delete a TCP port on a network port pair , see the "Configuring SSL Interception" chapter of the Network Security User Guide.

Syntax

[no] policymgr interface <port-pair-name> ssl-intercept tcp port <port_number>

Parameters

no

Use the no form of this command to delete a TCP port from a port pair.

<port-pair-name>

Designation that is configured on the appliance interface.

<port_number>

The TCP port number to intercept HTTPS traffic on one port pair.

Example

The following example shows how to add a TCP port on a network port pair for SSL interception on the Network Security appliance.

hostname (config) # policymgr interface A ssl-intercept tcp port 443

The following example show how to delete a TCP port from a port pair on the Network Security appliance.

hostname (config) # no policymgr interface A ssl-intercept tcp port 443

User role

Admin or Operator

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later: