Issues with SSL Inspection

[MMCiobanu]

Hi,

I am having this weird issue where an application breaks because of SSL inspection. I have made an exclusion  based on the certificate:

ssl-exclude-cert [ login.salesforce.com *.salesforce.com ];

However, the firewall still decrypts the traffic, and it looks like it does when a different application is detected:

This traffic is generated by the same user application and uses the same certificate.

Has anybody else experienced this and was able to figure out how to solve it?

Thank you.

[pankaku]

add these url to exclude list

www.salesforce.com/

login.salesforce.com/

*.salesforce.com/

[MMCiobanu]

unfortunately, this still did not solve the issue. The user would have to try multiple times to log in to be succesful and it still looks like the firewall is inspecting traffic, despite the exclusions.

[Raido_Rattameister]

Can you post screenshot of your no-decrypt policy?

[MMCiobanu]

please see below:

Thank you.

[Raido_Rattameister]

And this no-decrypt policy is top one?

Go to Monitor > URL Filtering

Use following filter

( url contains salesforce )

Add column "Decrypted"

You can remove source user fields.

And take screenshot of that.

[Raido_Rattameister]

Also try to remove ending / from URL's in safelist.

Never mind. Tested and worked both ways - with / and without.