Forum Discussion
Marc_64553
Apr 05, 2013Nimbostratus
Replace || with &&. It looks like you want both conditions to be met for the connection to be dropped and logged. Therefore you need to AND instead of OR.
Condition 1: ! [class match [substr [X509:subject [SSL::cert 0]] 3 ","] equals CLASS-1 ]
Condition 2: ! [class match [substr [X509:subject [SSL::cert 0]] 3 ","] equals CLASS-2 ]
Hope this helps.