Exclude Domains from HTTPS Filtering

If you need to add exclusions from HTTPS filtering, click the Web UI / Squid Proxy / HTTPS and SSL / Exclusions tab and add as many exclusions as desired. Please note, these exclusions work only when browsers are configured to use Squid proxy explicitly. If you have an invisible intercept proxy then these exclusions need to be managed by your firewall. The following screen shot shows example exclusions for Apple devices.

../../_images/https_exclusions3.png

The following exclusion types are supported:

  • Exclusion by domain name
  • Exclusion by IP address or IP subnet
  • Exclusion by assigned categories of a domain name

The last type of exclusions is very useful to automatically exclude financial institutions and government sites from HTTPS inspection and SSL filtering. The following screenshot shows default excluded categories.

../../_images/https_exclude_by_category3.png