No Decryption Tab Settings
Block sessions with expired certificates
Terminate the SSL connection if the server certificate is expired. This prevents users from accepting expired certificates and continuing with an SSL session.
Block sessions with expired certificates to prevent access to potentially insecure sites.
Block sessions with untrusted issuers
Terminate the SSL session if the server certificate issuer is untrusted.
Block sessions with untrusted issuers because an untrusted issuer may indicate a man-in-the-middle attack, a replay attack, or another attack.