InlineTLS/SSL show command Field Descriptions

Source IP

Source IP of the Host/Client from where connection was initiated.

IPv4 or IPv6 address.

Destination IP

Destination IP of the Host/Server at which connection is terminated.

IPv4 or IPv6 address.

Source Port

Source Port at client side.

TCP port range (0 to 65535).

Destination Port

Destination Port at the server side.

TCP port range (0 to 65535).

Protocol

Inline SSL Session's protocol details.

TLS/SSL Inbound -Inbound TLS/SSL session

TLS/SSL Outbound -Outbound TLS/SSLsession.

Non-SSL- Not an SSL session, need not be decrypted.

TCP State

TCP state of all the legs/ports of ISSL such as:

Na - Inline Network Port A.
Nb - Inline Network Port B.
Ta - Inline Tool Port A.
Tb - Inline Tool Port B..

All Possible TCP protocol state for each leg:

●

INIT – TCP connection is yet to be started from GigaSMART engine.

●

SYN-SENT – GigaSMART engine has initiated the TCP connection to the server.

●

SYN-RECEIVED – GigaSMART engine has received a TCP connection request from a client.

●

ESTABLISHED – GigaSMART engine has established an ongoing TCP connection.

●

FIN-WAIT-1 – GigaSMART engine has initiated connection termination request

●

FIN-WAIT-2 – GigaSMART engine has received an acknowledgement for its connection termination request, awaiting for connection termination from other end.

●

CLOSE-WAIT – GigaSMART engine has received connection termination request.

●

CLOSING – GigaSMART engine is awaiting acknowledgment for its connection termination request.

●

LAST-ACK – GigaSMART engine has acknowledged connection termination request and sent the connection termination request, and is awaiting for the last acknowledgement before closing.

●

TIME-WAIT – GigaSMART engine waiting for the other host to receive the last acknowledgement sent.

●

CLOSED – TCP connection is closed at GigaSMART engine.

N/A – TCP not expected to be performed at this leg for this session

Decryption

Session traffic is being decrypted.

Yes, No

Error

Specifies if this session processing has any error.

ERR, NO_ERR

SSL State

State of SSL processing.

●

N/A,

●

Handshake,

●

Decrypting,

●

Bypass:no_config,

●

Bypass:clientHello_err,

●

Bypass:no_sni,

●

Bypass:no_cert,

●

Drop:cert_mismatch,

●

Drop:tool_block,

●

Bypass:policy,

●

Bypass:handshake_fail,

●

Bypass:unknown_revocation,

●

Bypass:client_auth,

●

Bypass:version_mismatch,

●

Bypass:src_ssl_init_error,

●

Bypass:ssl_key_mismatch,

●

Drop:version_mismatch,

●

Bypass:unsupported_ciphers,

●

SSL_Proxy:non_http

Cert Subject Name

Client's Certificate subject name.

C2S Status

Client to Server TCP state details.

All Possible TCP protocol state: (For detailed explanation, refer previous explanation on TCP states on the table)

INIT, CLOSED, SYN SENT, SYN RECD, EST, CLOSE WAIT, FIN WAIT 1, CLOSING, LAST ACK, FIN WAIT 2, TIME WAIT, N/A

S2C Status

Server to Client TCP state details.

All Possible TCP protocol state: (For detailed explanation, refer previous explanation on TCP states on the table)

INIT, CLOSED, SYN SENT, SYN RECD, EST, CLOSE WAIT, FIN WAIT 1, CLOSING, LAST ACK, FIN WAIT 2, TIME WAIT, N/A

Tool Status

Status of Tool connection status.

●

TOOL_NOT_BYPASS – Traffic will flow through tools.

●

TOOL_BYPASS – Traffic will skip tools.

PolicyVerdict

ISSL policy decision determined for this session.

●

NO_DECRYPT

●

PENDING

●

DECRYPT

PolicyMatchFields

The fields through which policy matching is derived.

●

DEFAULTSRC_IP

●

DST_IP

●

SRC_PORT

●

DST_PORT

●

VLAN

●

DOMAIN

●