topic Re: How do I export my custom URL no-decrypt list to the new SSL Decryption Exclusion list in 8.0? in General Topics

How do I export my custom URL no-decrypt list to the new SSL Decryption Exclusion list in 8.0?

Maxstr — Mon, 12 Jun 2017 14:37:49 GMT

I have a long list of URL's in my custom list to exclude from decryption. I can export my URL catagory list, but I don't see any way to import into the SSL Decryption Exclusion list.

Re: How do I export my custom URL no-decrypt list to the new SSL Decryption Exclusion list in 8.0?

rmfalconer — Tue, 13 Jun 2017 23:38:12 GMT

You can use the CLI to import the URLs.

set shared ssl-decrypt ssl-exclude-cert <URL> exclude yes description <"">

Re: How do I export my custom URL no-decrypt list to the new SSL Decryption Exclusion list in 8.0?

gwesson — Tue, 13 Jun 2017 23:44:45 GMT

Any certificate you marked as an "SSL Exclude Certificate" will get converted automatically as part of the upgrade.

If you're just using a URL to exclude from decryption, that is maintained as part of your decryption policy, so the upgrade will keep that as well.