This is not entirely new. In pre-8.0 version this list also existed and it had the same default behaviour (exclude from decryption).
In pre-8.0 however you couldn't change the default behaviour.
PAN-OS 8.0 made the list visible in the GUI and added the possibility to disable the exclusion.
Thanks Kiwi for the clarification. Agree...The changes in 7.1 where the "reason for end" which illustrates certificate issues as well as features like this which give greater visibility to admins in the GUI is always a good thing.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!