Make sure that the hostname is unique for each entry. If the
hostname of a predefined exclusion matches the hostname of a
custom entry, the custom entry takes precedence.
You can
use
wildcards to exclude multiple hostnames associated
with a domain. The
NGFW does not decrypt the
sessions if the server presents a Common Name (CN) that matches
the domain.