Server Name Indication (SNI) for Web filtering

Junos OS supports Server Name Indication (SNI) for Web filtering. All three types of Web filtering local, Websense-redirect, and Enhanced Web Filtering (EWF) leverage SNI support. SNI is an extension of SSL/TLS protocol to indicate what server name the client is contacting over an HTTPS connection. SNI inserts the actual hostname of the destination server in client's hello message in clear text format before the SSL handshake is complete. Web filtering includes SNI information in the query. In this implementation, the SNI includes only the server name, and not the full URL of the server. If this packet has no SNI extension or if an error is encountered during parsing, Web filtering reverts to using only destination IP address.