Skip to content

Commit e2959c5

Browse files
committed
Improve TLS requests
1 parent 12974bb commit e2959c5

File tree

1 file changed

+7
-30
lines changed
  • src/content/docs/learning-paths/secure-internet-traffic/build-http-policies

1 file changed

+7
-30
lines changed

src/content/docs/learning-paths/secure-internet-traffic/build-http-policies/tls-inspection.mdx

Lines changed: 7 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -116,21 +116,10 @@ For example, if users are issued a corporate-managed iPhone with limited permiss
116116
method="POST"
117117
json={{
118118
name: "Do not inspect corporate devices",
119-
conditions: [
120-
{
121-
type: "device_posture",
122-
expression: {
123-
any: {
124-
in: {
125-
lhs: {
126-
splat: "device_posture.checks.passed",
127-
},
128-
},
129-
rhs: ["{serial_number_list_uuid}"],
130-
},
131-
},
132-
},
133-
],
119+
traffic: "",
120+
identity: "",
121+
device_posture:
122+
'any(device_posture.checks.passed[*] in {"<SERIAL_NUMBER_LIST_UUID>"})',
134123
action: "off",
135124
precedence: 14002,
136125
enabled: true,
@@ -155,22 +144,10 @@ If you filter your network-connected devices with Magic WAN tunnels, the WARP Co
155144
method="POST"
156145
json={{
157146
name: "Do not inspect corporate devices",
147+
traffic: "http.conn.internal_src_ip in {203.0.113.0/24}",
148+
identity: "",
149+
device_posture: "",
158150
action: "off",
159-
conditions: [
160-
{
161-
type: "traffic",
162-
expression: {
163-
in: {
164-
lhs: "http.conn.internal_src_ip",
165-
rhs: [
166-
{
167-
cidr: "203.0.113.0/24",
168-
},
169-
],
170-
},
171-
},
172-
},
173-
],
174151
}}
175152
/>
176153

0 commit comments

Comments
 (0)