SSL Exclusion Menu

SSL Exclusions enables exclusion of certain domains from SSL inspection. Domains may be excluded for various reasons, such as to avoid inspecting domains that handle sensitive data or for applications that use certificate pinning, since SSL inspection of such application's traffic will result in connection failure.

The following configuration is not part of the policy rules, and any domain added to it will not be inspected under any circumstances, regardless of the order in which the policy rules are applied.

To add a new SSL exclusion category:

1. Go to Policy-> SSL Exclusions.
2. Click New SSL Exclusion.

The New SSL Exclusion screen appears.

3. Add a Name for the Exclusion.
4. Add a Description (optional).
5. Click Exclude a domain to exclude a domain.
6. Enter the domain or DNS wildcard.
7. Click Submit.
8. Click Apply Changes-> Commit Changes.

To edit a SSL exclusion:

1. Go to Policy-> SSL Exclusions.
2. Hover over the exclusion you wish to edit.
3. Click the Edit icon.
4. Remove an entry from the list

To delete a custom web category:

1. Go to Policy-> SSL Exclusions.
2. Hover over the exclusion you wish to delete.
3. Click the Delete icon.

📘

Disabling an Exclusion

Toggle the "Enabled" toggle in the menu to disable an existing SSL Exclusion without deleting it.