<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic possible to unblock for one website - Block sessions with untrusted issuers? in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/possible-to-unblock-for-one-website-block-sessions-with/m-p/478119#M103723</link>
    <description>&lt;DIV&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;SPAN&gt;Hello,&lt;/SPAN&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;SPAN&gt;On my "no-decrypt" policy - I couldnt find a way to exclude only a specific site from having an untrusted CA issuer. The only way to solve the problem and to be able to connect the device on our LAN to the website was to uncheck the box on the no-decrypt profile " Block sessions with untrusted issuers" - but now that opens up all of them.&lt;/SPAN&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
    <pubDate>Mon, 04 Apr 2022 21:10:24 GMT</pubDate>
    <dc:creator>roma</dc:creator>
    <dc:date>2022-04-04T21:10:24Z</dc:date>
    <item>
      <title>possible to unblock for one website - Block sessions with untrusted issuers?</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/possible-to-unblock-for-one-website-block-sessions-with/m-p/478119#M103723</link>
      <description>&lt;DIV&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;SPAN&gt;Hello,&lt;/SPAN&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;SPAN&gt;On my "no-decrypt" policy - I couldnt find a way to exclude only a specific site from having an untrusted CA issuer. The only way to solve the problem and to be able to connect the device on our LAN to the website was to uncheck the box on the no-decrypt profile " Block sessions with untrusted issuers" - but now that opens up all of them.&lt;/SPAN&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
      <pubDate>Mon, 04 Apr 2022 21:10:24 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/possible-to-unblock-for-one-website-block-sessions-with/m-p/478119#M103723</guid>
      <dc:creator>roma</dc:creator>
      <dc:date>2022-04-04T21:10:24Z</dc:date>
    </item>
    <item>
      <title>Re: possible to unblock for one website - Block sessions with untrusted issuers?</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/possible-to-unblock-for-one-website-block-sessions-with/m-p/478290#M103734</link>
      <description>&lt;P&gt;Hi &lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/116207"&gt;@roma&lt;/a&gt; ,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;"Block sessions with untrusted issuers" is a global setting.&lt;/P&gt;
&lt;P&gt;You can &lt;A href="https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/decryption-exclusions/exclude-a-server-from-decryption" target="_blank" rel="noopener"&gt;exclude-a-server-from-decryption&lt;/A&gt; or &lt;A href="https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/decryption-exclusions/create-a-policy-based-decryption-exclusion#id0d78e7ae-3a8c-4bd5-b720-96a3d46882ad" target="_blank" rel="noopener"&gt;create-a-policy-based-decryption-exclusion&lt;/A&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Hope this helps,&lt;/P&gt;
&lt;P&gt;-Kiwi.&lt;/P&gt;
&lt;DIV id="ConnectiveDocSignExtentionInstalled" data-extension-version="1.0.4"&gt;&amp;nbsp;&lt;/DIV&gt;</description>
      <pubDate>Tue, 05 Apr 2022 10:23:40 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/possible-to-unblock-for-one-website-block-sessions-with/m-p/478290#M103734</guid>
      <dc:creator>kiwi</dc:creator>
      <dc:date>2022-04-05T10:23:40Z</dc:date>
    </item>
  </channel>
</rss>

