Exclude a Server from Decryption for Technical Reasons (Strata Cloud Manager)
Focus
Focus
Network Security

Exclude a Server from Decryption for Technical Reasons (Strata Cloud Manager)

Table of Contents


Add servers to the Global Decryption Exclusions list to exclude them from decryption for technical, business, regulatory, personal, or other reasons.
  1. Log in to Strata Cloud Manager.
  2. Navigate to the Global Decryption Exclusions settings.
    Select Manage Configuration NGFW and Prisma Access Security Services Decryption.
  3. Add an entry to the Custom Exclusions list.
    1. Click the + (plus icon).
    2. Enter the Hostname of the website or application you want to exclude from decryption. The hostname is case-sensitive.
      Make sure that the hostname is unique for each entry. If the hostname of a predefined exclusion matches the hostname of a custom entry, the custom entry takes precedence.
      You can use wildcards to exclude multiple hostnames associated with a domain. The NGFW does not decrypt the sessions if the server presents a Common Name (CN) that matches the domain.
    3. (Optional) Enter a Description.
    4. Save your entry.
  4. To commit your changes, click Push Config.