Disabling your certificate error bypass list
When you activate HTTPS Inspection at your organization, all sites with certificate errors are blocked by default. However, you can create a site bypass list that specifies which sites users can access even if there is a certificate error.
You can disable the site bypass list, or deactivate site bypass for individual sites on the list. All sites on the site bypass list are retained in memory, so you can easily enable site bypass in the future, if needed.
- To disable the site bypass list,clickServices>Web Security Services>HTTPS.
- In theAllow access to sites with certificate errorssection, deselectEnable site bypass list.
- ClickBlockto confirm.The bypass list is hidden and you can no longer add or remove entries. However, all sites on the list are retained in memory. If you selectEnable site bypass list, the list reappears in the HTTPS Inspection page.
- To block access to individual sites on the site bypass list,clickServices>Web Security Services>HTTPS.
- In theAllow access to sites with certificate errorssection, make sureEnable site bypass listis selected.
- In theActivecolumn, clickOnto toggle site bypassOfffor each website where you want to block access. If the selected site has a certificate error, users see a message that there is a problem with the site certificate and are denied access.