topic Re: ssl decrypt exempt - use exclusion list or config no decryption policy in General Topics

ssl decrypt exempt - use exclusion list or config no decryption policy

MP18 — Fri, 23 Nov 2018 12:53:51 GMT

Need to know when we need to exempt website from SSL decrypt what is the best practice

should we add the url in built in ssl exclusion list?

or should we create SSL decryption policy ?

Mick_Ball — Fri, 23 Nov 2018 13:10:56 GMT

I prefer to use a "URL Category" called No_Decrypt and create a new policy above the decrypt policy.

MP18 — Fri, 23 Nov 2018 14:48:43 GMT

So which one get hit first ssl exclusion list or security policy?

Mick_Ball — Fri, 23 Nov 2018 14:58:40 GMT

decrypt policies are purged before security.

MP18 — Fri, 23 Nov 2018 15:58:50 GMT

u mean decryption policy gets hit first before the ssl decrypt exclusion list?

Mick_Ball — Fri, 23 Nov 2018 16:51:07 GMT

yes, it was you that mentioned the security policy in your earlier post.

Sorry for the confusion.