Some sites and applications are inherently not compatible with SSL decryption either due to certificate pinning, protocol tunneling, or proxy incompatibility.
The domains listed below do not work with SSL Decryption enabled. As a result, these sites must be exempted from SSL Decryption. A site can be exempted from SSL Decryption on a group-by-group basis on the Group Permissions page or globally via SSL Decryption Exceptions (Group Permissions > Global Configuration > SSL Decryption Exceptions).
|
Site |
Domain Exception |
|
Apple |
itunes.apple.com xp.apple.com gsa,apple.com s.mzstatic.com |
|
Dropbox App |
dropbox.com dropboxapi.com |
|
Facebook Live |
facebook.com fbcdn.net |
|
Google Drive App |
googledrive.com drive.google.com |
|
Google Mail App |
mail.google.com inbox.google.com |
|
GoToMeeting |
gotomeeting.com citrixsaas.d1.sc.omtrdc.net secure.citrixonline.com expertcity.com |
|
Join.Me |
join.me |
|
kahoot.it |
kahoot.it |
|
Kayak.com |
kayak.com r9cdn.net |
|
LogMeIn |
logmein.com logmeinrescue.com logmeinrescue-enterprise.com vpn.net |
|
Periscope |
periscope.tv |
|
Renaissance Learning |
renlearn.com renlearnrp.com renaissance.com ajax.googleapis.com |
|
RevTrak |
mypinpointe.com revtrak.com revtrak.net |
|
Web sockets |
lastpass.com SSLlabs.com Ipalyzer.com |
|
WebEx |
webex.com |
|
YouTube Kids |
youtubei.googleapis.com yt3.ggpht.com i.ytimg.com |
--------------------------------------------------------------------------------------------------
ONLY USE THE BELOW IF APPLICABLE
--------------------------------------------------------------------------------------------------
|
Site |
Domain Exception |
|
Minecraft (if applicable) |
mojang.com minecraft.net |
|
New Mexico Public Education Department (if applicable) |
obms.ped.state.nm.us |
|
Slack (if applicable) |
your_team.slack.com (where your_team is the name of your Slack team) slack-msgs.com |
|
Method:CRM (if applicable) |
methodintegration.com methodcdn.com method.me |