Why the exclude list of SSL Inspection does not work

Zyxel_Kevin

Question:

I would like to exclude the IP address of website to bypass ssl inspect.

(For example: www.test.com resovle to 1.1.1.1)

but it doesn't work.

Answer:

The IP address in exclude list is SAN(Subject Alternative Name) of certficate extension.

We recommend use the SNI or Domain CN as exclude list.