SSL Decryption Exclusions Jamf Protect

Craig-f3 — Wed, 20 Oct 2021 08:50:21 GMT

We are trialling Jamf Protect but this doesn't support SSL decryption which we use as standard (https://docs.jamf.com/jamf-protect/documentation/Network_Communication_Used_by_Jamf_Protect.html)

The above doc lists some URL's that need to be excluded from SSL decryption but we are having problems getting it to work. Packet captures show that the URL's given are being resolved to one of many different addresses e.g. ec2-54-75-144-236.eu-west-1.compute.amazonaws.com by the time they hit Palo Alto.

We obviously can't add every possible address to our exclusions so the Jamf Environment Test Tool comes back with SSL errors. Has anyone had any luck getting Jamf Protect to work? Or have any suggestions on how to add amazonaws.com URL's to SSL decryption?

topic SSL Decryption Exclusions Jamf Protect in GlobalProtect Discussions

SSL Decryption Exclusions Jamf Protect