Device Configuration : Protect : Web : Exceptions : Add Exception
Add Exception
1. Go to Device Configuration > Protect > Web > Exceptions .
2. Click Add Exception.
3. Enter Name and Description for the Exception.
4. Specify web traffic criteria:
* The firewall evaluates all types of criteria specified using the ‘AND’ operator. For example, if you specify URL patterns and website categories, both types must return true in order to match traffic. However, within each category, criteria are evaluated using ‘OR’.
URL pattern matches
Match web traffic according to the specified URL or pattern, for example, example.com. Regular expressions are allowed here. For example, ^([A-Za-z0-9.-]*\.)?example\.com/ matches all subdomains of example.com.
Website categories
Match web traffic according to the specified web categories.
Source IP addresses (end-user's address)
Match web traffic that originates from the specified IP addresses.
Destination IP addresses (web site address)
Match web traffic going to the specified IP addresses.
5. Specify an action to skip when the firewall encounters traffic that matches the criteria.
HTTPS Decryption
Do not decrypt HTTPS for traffic that meets the specified criteria.
* If you disable HTTPS decryption, the firewall will not perform any other check that relies on decrypted traffic, such as malware scanning or micro-app detection. However, the firewall will continue to scan HTTP traffic that matches the exception.
Malware Scanning
Skip malware scanning when traffic that meets the specified criteria is encountered.
Sandstorm
Do not send files that are downloaded using the specified criteria to Sandstorm for analysis.
Policy Checks
Skip policy check when traffic that meets the specified criteria is encountered.