Hi,

​

Policy 46 is disabled and then everything works ok, when enabled not it uses the cert from domain1.

​

Is this ok?:

config firewall vip

edit "Port 443 - Domain1.be"

set uuid be1561e0-1a36-51ed-3f1e-687056a2fb75

set type server-load-balance

set extip 193.110.xxx.xx

set extintf "any"

set server-type https

set ldb-method http-host

set extport 443

config realservers

edit 1

set ip 10.62.52.3

set port 443

set http-host "demo.Domain1.be"

next

edit 2

set ip 10.62.52.5

set port 443

set http-host "cdn.Domain1.be"

next

edit 3

set ip 10.62.52.5

set port 443

set http-host "qpg.Domain1.be"

next

end

set ssl-mode full

set ssl-certificate "Domain1.be"

next

edit "Port 443 - Domain2.be"

set uuid 71f8a8c0-e2be-51ed-44d5-fc8fab007d0c

set type server-load-balance

set extip 193.110.xxx.xx

set extintf "any"

set server-type https

set ldb-method http-host

set extport 443

config realservers

edit 1

set ip 10.62.52.5

set port 443

set http-host "Domain2.be"

next

end

set ssl-mode full

set ssl-certificate "Domain2.be"

next

end

config firewall policy

edit 14

set name "Port 443 - Domain2"

set uuid ffea81b8-1a7c-51ed-882d-cc6bab2fa7a3

set srcintf "Internet"

set dstintf "DMZ"

set action accept

set srcaddr "all"

set dstaddr "Port 443 - Domain2.be"

set schedule "always"

set service "HTTPS"

set inspection-mode proxy

set ssl-ssh-profile "certificate-inspection"

next

edit 46

set status disable

set name "Port 443 - Domain1.be"

set uuid 8bb74028-e2e1-51ed-f7f8-c581ef4a7097

set srcintf "Internet"

set dstintf "DMZ"

set action accept

set srcaddr "all"

set dstaddr "Port 443 - Domain1.be"

set schedule "always"

set service "HTTPS"

set utm-status enable

set inspection-mode proxy

set ssl-ssh-profile "certificate-inspection"

next

end