We have SSL decryption enabled on our PA NGFWs but our users have reported issues relating to online payment transactions. We have worked around this by creating a whitelist to bypass decryption but as more sites offer payment facilities online, it will eventually become unfeasible to maintain a bypass list. What is Palo's approach to dealing with this? Are other organizations facing the same issue and how are they dealing with it?
Thank you for your post @Joe_Ng
Palo Alto's recommendation is to exclude whole URL category: "financial-services" https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-exclusions/create-a-... This should cover sites that you get redirected to for online payments.
Thank you for reply @Joe_Ng
I see. If you believe there is a URL mis-categorization, you can submit a request from this link: https://urlfiltering.paloaltonetworks.com/
Other than what you are already doing with a manual whitelist, I can't think of any better way to avoid the issue you reported.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!