Support Center > Search Results > SecureKnowledge Details
Traffic is blocked, log shows "URL Filtering - Unauthorized Sni: 'URL' found" Technical Level
Symptoms
  • There is a large number of unauthorized SNI logs.
    The logs show:

    URL Filtering - Unauthorized Sni: '<URL>' found (*number*)
    Connection terminated before detection: Insufficient data passed.
    

  • Traffic capture shows that the connection stops after the Security Gateway receives the certificate.

Cause

The server provided an SNI that is not approved (for example, an SNI that does not align with SAN).
The Security Gateway blocks servers with  SNIs that are not approved.

Because the connection terminates early, the URL Filtering blade does not have sufficient information to match the rule. 


Solution
Note: To view this solution you need to Sign In .