ssl decrypt exempt - use exclusion list or config no decryption policy

[MP18]

Need to know when we need to exempt website from SSL decrypt what is the best practice 

should we add the url in built in ssl exclusion list?

or should we create SSL decryption policy ?

[Mick_Ball]

I prefer to use a "URL Category" called No_Decrypt and create a new policy above the decrypt policy.

i

[MP18]

So which one get hit first ssl exclusion list or security policy?

[Mick_Ball · Accepted solution]

decrypt policies are purged before security.

[MP18]

u mean decryption policy gets hit first before the ssl decrypt exclusion list?

[Mick_Ball · Accepted solution]

yes, it was you that mentioned the security policy in your earlier post.

Sorry for the confusion.