Exclude domains from inspection of HTTPS traffic

The HTTPS Inspection Exceptions element is a list of domains that are excluded from decryption and inspection.

HTTPS Inspection Exceptions are used in a custom HTTPS service to define a list of domains for which HTTPS traffic is not decrypted. The custom HTTPS service must be used in a rule, and only traffic that matches the rule is excluded from decryption and inspection. HTTPS Inspection Exceptions are primarily intended for backwards compatibility.

For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Select Configuration.
  2. Expand the Other Elements branch.
  3. Right-click HTTPS Inspection Exceptions, then select New HTTPS Inspection Exceptions.
  4. Enter a unique Name.
  5. Click Add.
  6. Enter the domain name or NetBIOS name, then click OK.
    Note: The domain name or NetBIOS name must exactly match the domain names that users access. Otherwise, the domain is not excluded from decryption and inspection. Wildcard characters (*) are not allowed.

HTTPS Inspection Exceptions Properties dialog box

Use this dialog box to define the properties of the HTTPS Inspection Exceptions.

Option Definition
Name Specifies a unique name for the exception.
Non-decrypted domains Shows the list of domains that are excluded from decryption and inspection.
Add Opens the Add Non-decrypted Domain dialog box.
Edit Opens the Add Non-decrypted Domain dialog box for the selected exception.
Remove Removes the exception.
Comment An optional comment for your own reference.

Add Non-decrypted Domain dialog box

Use this dialog box to select the domains for which HTTP traffic is not encrypted or inspected.

Option Definition
Enter a Non-Decrypted domain The domain name or NetBIOS name of the domain that is excluded from decryption and inspection.