Decryption Exlusions

ce1028 — Thu, 07 Oct 2021 13:57:11 GMT

As you all know, Palo Alto gives you two ways to exclude sites from decryption. Are there any scenarios where excluding from SSL Decryption Exclusions works but setting the same url in a decryption policy doesn't?

I ask because I've had the scenario where I get a certificate validation error using an app, I look at the cert and see it's for a URL that I have excluded via decryption policy, yet the error shows my internal CA as the root ca (which means it was decrypted)

Re: Decryption Exlusions

jdelio — Thu, 07 Oct 2021 20:08:32 GMT

I have not heard of that, but you never know.

Are you using www.site.com or just site.com ?

topic Re: Decryption Exlusions in General Topics

Decryption Exlusions

Re: Decryption Exlusions