Managing Certificate Exceptions Parent topic

The list of digital certificate exceptions displays the end certificates that fail to pass the certificate validation test and the certificates that the administrator needs to set special actions according to the organization's information security policies.
When users attempts to access a website whose certificate does not pass the certificate validation test for the first time, Deep Discovery Web Inspector automatically adds the certificate to the exceptions list and displays a page warning the user about the invalid or unknown certificate. By default, the Action is set to Warn and can be changed as necessary. Deep Discovery Web Inspector will process subsequent attempts to websites using this certificate according to the update.
You can also manually add a certificate exception.

Procedure

  1. Go to Policy → Digital Certificates → Exceptions.
  2. Manage certificate exceptions:
    Task
    Details
    Add/Edit a certificate exception
    See Adding/Editing Certificate Exceptions.
    View existing certificate exceptions
    The Common Name, Description, Type, and Action fields automatically populate with the related data after a certificate exception is added.
    • Type: There are two types of the certificate exception
      • cn: Added from the Deep Discovery Web Inspector web console
      • cert: Automatically added by Deep Discovery Web Inspector
    • Action: Action to take on access to the websites using the certificate in their certification path (Allow, Warning, Block).
    Delete a certificate exception
    Select one or several certificate exceptions to delete and then click Delete.
Related information