Allow all web addresses with .gov and .edu extensions

[turgutkaraagac]

Hi everyone,

I am decrypting all my traffic through a firewall device using an SSL certificate, except for exceptions. How can I create exceptions for all websites with 'gov' and 'edu' extensions?

Thank you for your help

[reaper · Accepted solution]

you can create a 'no-decrypt' rule and either set up a custom URL category containing all the things you do not want to decrypt:

(make sure you add the / at the end)

there's also built-in  categories that you can set in your no-decrypt rule as category to prevent decryption:

lastly, make sure to put the no-decrypt rule at the top of your decryption policy

[turgutkaraagac]

Thank you for helping, I solved my problem with your method