SSL Decryption Exceptions

Home > Enterprise security devices or applications > Paloalto firewall > SSL Decryption Exceptions

Introduction

If SSL Decryption is enabled for WAN traffic, certain mobile applications (such as Google Play Store, YouTube, PhonePe, Netflix), applications common to both systems and mobile devices (such as Zoom), or specific websites (such as IRCTC login) may appear inconsistent or malfunction. This can occur due to certificate pinning, anti-bot mechanisms, or broken certificate chains.

To ensure these applications and websites function correctly even with SSL Decryption enabled, specific exceptions should be configured.

This article provides the resolution steps to mitigate such issues and restore the expected functionality of affected applications and websites.

Please refer to the table below for the issues and their corresponding resolution steps:

S.No.	Issues	Resolution
1	Google Play Store	Add the following URLs to a URL Category and include it in the SSL Decryption Exception policy: - *.play.google.com play.google.com *.ggpht.com *.googleapis.com *.gvt1.com *.googleusercontent.com android.clients.google.com
2	IRCTC Login	Add the following URLs to a URL Category and include it in the SSL Decryption Exception policy: www.irctc.co.in *.irctc.co.in
3	Jio Cinema Mobile Application	Add *.jiocinema.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management)
4	Ollama Pull	Add FQDN object r2.cloudflarestorage.com to the SSL Decryption Exception policy
5	PhonePe Mobile Application	Add *.phonepe.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management)
6	Rapido Mobile Application	Add *.rapido.bike as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management)
7	Uber Mobile Application	Add *.uber.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management)
8	YouTube Mobile Application	Add *.googlevideo.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management)
9	Zomato Mobile Application	Add *.zomato.com as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management)
10	Zoom Application	Add *.zoom.us as a Certificate Exception in the SSL Decryption Exclusion (Device -> Certificate Management)

Home > Enterprise security devices or applications > Paloalto firewall > SSL Decryption Exceptions