Decryption Policy Parent topic

Go to Administration → Monitoring/Scanning → TLS Traffic Inspection → Decryption Policy to specify which traffic to decrypt and which traffic to except from decryption.
You can perform the follow actions on the Decryption Policy screen:
Section
 Decrypt or Exceptions
Action or Setting
Description
All
All
Import Policy
Import a policy.
All
All
Export Policy
Export a policy to create a backup or use in another appliance.
All
All
Save
Save the current policy settings.
Client IP Addresses
Decrypt
Add
Add a client IP address to decrypt.
Client IP Addresses
Decrypt
Import
Import client IP addresses to decrypt.
Client IP Addresses
Decrypt
Export All
Export all client IP addresses from the decrypt list.
Client IP Addresses
Decrypt
Delete
Delete selected client IP addresses from the decrypt list.
Client IP Addresses
Decrypt
Search IP or description
Search for the specified client IP address or description in the decrypt list.
Client IP Addresses
Exceptions
Add
Add a client IP address to exceptions.
Client IP Addresses
Exceptions
Import
Import client IP addresses to exceptions.
Client IP Addresses
Exceptions
Export All
Export all client IP addresses from exceptions.
Client IP Addresses
Exceptions
Delete
Delete selected client IP addresses from exceptions.
Client IP Addresses
Exceptions
Search IP or description
Search for the specified client IP address or description in exceptions.
Server Ports
Decrypt
  • Any
  • Custom
Select Any to decrypt connections to any server port, or select Custom and specify specific ports.
Server Domain Categories
Note
Note
Server Domain Categories is disabled when using a Smart Protection Server. For details, see Configuring Web Reputation Settings.
  • Decrypt
  • Not decrypt
  • Any
  • None
  • Custom
 Select which server domain categories to decrypt or not decrypt.
Domain Objects
Decrypt
Any
Select to decrypt any connection to a domain.
Domain Objects
Decrypt
None
Select to decrypt no connections based on domain.
Domain Objects
Decrypt
Custom
Select to specify which connections to decrypt based on domain.
You can do the following:
  • Add a domain name or IP address
  • Delete selected domains from the list
  • Import a list of domain IP addresses and domain names
  • Export All domains in the list
  • Search domain in the list
Domain Objects
Exceptions
Add
Add a domain name or IP address
Domain Objects
Exceptions
Delete
Delete selected domains from the list
Domain Objects
Exceptions
Import
Import a list of domain IP addresses and domain names
Domain Objects
Exceptions
Export All
Export All domains in the list
Domain Objects
Exceptions
Search domain
Search for a domain in the list