How does it work?

This criterion lets you match based on the client certificates configured to authenticate client requests to edge servers.

This requires that you have implemented the Enforce mTLS settings behavior in a parent rule and set the When checks fail option to Continue.

Features and options

Field	What it does
Enforce mTLS settings results	Specifies custom handling of requests if any of the checks in the Enforce mTLS settings behavior fails with the following options: - Failed checks in Enforce mTLS settings - Passed checks in Enforce mTLS settings - Ignore checks in Enforce mTLS settings
Provided	Specifies the scenarios under which this match evaluates to true. This option displays only if Ignore checks in the Enforce mTLS settings behavior is specified. The values are: - Cert is missing - Cert is present and valid - Cert is present but invalid - Cert is present (valid or invalid)