You can exclude flows from decryption by adding it to the Outbound SSL decryption exclusion list. This helps to avoid decrypting personal and sensitive information. It also helps in Sensor performance optimization by reducing the load on the Sensor. This is achieved by avoiding decryption of trusted sessions. You can exclude certain outbound SSL traffic from decryption based on source or destination IP address, destination domain name, and URL category.
Note
SSL decryption exclusions are applicable to outbound SSL decryption only.
To manage outbound SSL decryption exclusions, select Policy → <Admin Domain Name> → Intrusion Prevention → Exceptions → Outbound SSL Decryption Exclusions. The Outbound SSL Decryption Exclusions page is displayed.
The list on the Outbound SSL Decryption Exclusions page displays the following information:
| Field | Description |
|---|---|
| State | Specifies whether the state of the exclusion is Enabled or Disabled. |
| Name | Name of the SSL decryption exclusion. |
| Scope | Device to which the outbound SSL decryption exclusion is applied. |
| Source Endpoint | Specifies the source IP address. |
| Destination |
Endpoint — Specifies the IP address or domain name of the destination endpoint. URL Hostname — Specifies the destination hostname of the URL. URL Category — Specifies the URL category of the destination endpoint. The Manager retrieves the list of URL categories from the GTI server. |
| Last Updated | Time — Specifies the time when the exclusion was last modified.
By — Displays the user who modified the exclusion. |
| Comment | Additional comment specified for the exclusion. |
| Search | Type your search criteria in the field to find the exclusion. |
You can perform the following actions from this page:
| Option | Definition |
|---|---|
.png){kind=small}
|
Add outbound SSL decryption exclusion. |
.png){kind=small}
|
Copy outbound SSL decryption exclusion. |
.png){kind=small}
|
Delete outbound SSL decryption exclusion. |
| View or Edit | To view or edit an outbound SSL decryption exclusion object, double-click the row of the exclusion. |
| Save as CSV | Export the outbound SSL decryption exclusion in CSV format. |
.png)