Client Certificates

General
1

What is the name of the domain?

.

What is the issue you’re encountering

Block traffic from devices that do not have a valid client SSL/TLS certificate

What steps have you taken to resolve the issue?

first i try to Block traffic from devices that do not have a valid client SSL/TLS certificate to our API by using
Client Certificates
my step :

I create Client Certificates
add my sub domain to enable mTLS
create Custom rules mTLS-enforced authentication
(http.host eq “my-domin.com” and not cf.tls_client_auth.cert_verified)

the issue is no block happen at all

2

Your rule only refers to your apex domain, not your subdomain.

Otherwise can you give your real subdomain and domain and show a screenshot of your rule.

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.