Bypass SSL Inspector based on domain, URL, etc.

[czeus]

Hello Untangle Community,

Is it possible to bypass SSL Inspection based on the domain or URL? Coming from the Sophos XG side and that device allows for the creation of regex-based Exceptions to bypass all SSL processing - would love to have that or similar on Untangle.

Thanks in advance.

[gravenscroft]

Sure! Go to Apps > SSL Inspector > Rules and add a new rule with the condition

SSL Inspector: SNI Host Name = *domain.com

Set the action type to 'ignore' and move the rule up, so it's placed above any rules that would inspect that site.