Difference between revisions of "SSL Decryption Exceptions"
From Notes_Wiki
(Created page with "Home > Enterprise security devices or applications > Paloalto firewall > SSL Decryption Exceptions ==Introduction== If the SSL Decryption is enabled for WAN traffic a few mobile applications such as Google Play Store, YouTube, PhonePe, Netflix, etc. or applications common to both system and mobiles such as Zoom, etc. or a few websites such as IRCTC Login, etc might seem inconsistent or broken because of either certificate pinning, anti-bot mech...") |
|||
| Line 2: | Line 2: | ||
==Introduction== | ==Introduction== | ||
If | If SSL Decryption is enabled for WAN traffic, certain mobile applications (such as Google Play Store, YouTube, PhonePe, Netflix), applications common to both systems and mobile devices (such as Zoom), or specific websites (such as IRCTC login) may appear inconsistent or malfunction. This can occur due to certificate pinning, anti-bot mechanisms, or broken certificate chains. | ||
To ensure these applications and websites function correctly even with SSL Decryption enabled, specific exceptions should be configured. | |||
This article | This article provides the resolution steps to mitigate such issues and restore the expected functionality of affected applications and websites. | ||
==Please refer to the table below for the issues and their resolution steps: -== | ==Please refer to the table below for the issues and their corresponding resolution steps: -== | ||
{| class="wikitable" border="1" style="border-collapse: collapse;" | {| class="wikitable" border="1" style="border-collapse: collapse;" | ||
Revision as of 10:14, 17 October 2025
Home > Enterprise security devices or applications > Paloalto firewall > SSL Decryption Exceptions
Introduction
If SSL Decryption is enabled for WAN traffic, certain mobile applications (such as Google Play Store, YouTube, PhonePe, Netflix), applications common to both systems and mobile devices (such as Zoom), or specific websites (such as IRCTC login) may appear inconsistent or malfunction. This can occur due to certificate pinning, anti-bot mechanisms, or broken certificate chains.
To ensure these applications and websites function correctly even with SSL Decryption enabled, specific exceptions should be configured.
This article provides the resolution steps to mitigate such issues and restore the expected functionality of affected applications and websites.
Please refer to the table below for the issues and their corresponding resolution steps: -
S.No. |
Issues |
Resolution |
|---|---|---|
| 1 | Google Play Store | Add the following URLs to a URL Category and include it in the SSL Decryption Exception policy: -
|
| 2 | IRCTC Login | Add the following URLs to a URL Category and include it in the SSL Decryption Exception policy:
|
| 3 | Jio Cinema Mobile Application | Add *.jiocinema.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management) |
| 4 | Ollama Pull | Add FQDN object r2.cloudflarestorage.com to the SSL Decryption Exception policy |
| 5 | PhonePe Mobile Application | Add *.phonepe.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management) |
| 6 | Rapido Mobile Application | Add *.rapido.bike as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management) |
| 7 | Uber Mobile Application | Add *.uber.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management) |
| 8 | YouTube Mobile Application | Add *.googlevideo.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management) |
| 9 | Zomato Mobile Application | Add *.zomato.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management) |
| 10 | Zoom Application | Add *.zoom.us as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management) |
Home > Enterprise security devices or applications > Paloalto firewall > SSL Decryption Exceptions
