Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Specify the addresses exempted from the SSL proxy. This statement is supported on the SRX1500, SRX4100, SRX4200, SRX5400, SRX5600, and SRX5800 devices and vSRX.

You can selectively bypass SSL proxy processing for some sessions by configuring a allowlist. Typically, you might configure the allowlist to include trusted servers or domains with which you are very familiar. An allowlist include addresses that you want to exempt from undergoing SSL proxy processing.

To configure the allowlist, you need to specify the domain that you want to exempt in an address book and then configure the address in the SSL proxy profile.


  • allowlist-address—Specify address from the global address book.

Required Privilege Level

services—To view this statement in the configuration.

services-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.1X44-D10.