OK, unnecessary decryption exception.
So basically right now we have we can see that how the cells work and we are using our local certificate
generated by our firewall, this firewall, the certificate actually used between the hacking, kind
of getting the information they encrypt that send us that certificate to the to the requester browser,
initiate a connection on your behalf to the server and then in the man in the middle, like firewall
in the middle, inspecting all the traffic SSL traffic, because if it doesn't expect that there are
chances that, you know, maybe viruses, swarms and spyware can go through.
And also maybe the other problem is that the security is actually many users can actually make users
can actually get through regarding maybe they can build some kind of tunnel and communicate across to
other services.
Now, another problem, what we have seen is the certificate we have generated.
Now, this certificate we have created and we apply to exceptional we created a number.
We export it into the Web browser.
The problem is happening.
What the problem is happening.
Let's say, for example, I go to the HSBC website, so even my financial website is now also, you
see inspected, which I don't want to.
So we need to create some kind of exception for the some kind of, you know, the user, some kind of
because as of now, if you go to the PayPal, your traffic will be also inspected.
Some of the EU's mostly companies that don't want these kind of things, they want that the you know,
the finance website, government related Web site, those are the trusted website.
They should not be inspected.
For example, if I'm working in a company and I'm checking my login banking detail, for example, that
will be inspected by the firewall.
You see that connection?
It is secure, even though because it's a local certificate.
However, this connection, it's mean that anybody can can intercept that traffic, OK?
And then this will mean that we can see that username and password of anyone of even banking related
website, PayPal related website, a shopping website.
So basically what we need to do, we need to create some kind of exception that we should not inspect
the traffic for the different a different Web site and how we can do that.
We need to create a rule on the top of it.
So what we can do, we need to clone and put this all on the top.
Before this rule, at least, and what we need to do is we need to make sure that we.
The yes, the the previous the previous rule already clearly created, we just clone it and then we
make a change changes.
In the decryption rule already created, we just clone it.
So when you clone it, it's just a new policy is created.
You can modify that policy because it already have the.
What I say is I will say I will say this.
No decrypt.
OK, so this will be I'm saying do not let me just finish it.
So this is the same definition is the same.
However, in the usual category, what you can see, there are many other categories.
We will do the general category later on.
So, for example, shopping related.
OK, for example, finance related.
Financial community, so many websites when they created we created them, Jehova.
Government related website, so we trusted that these websites, otherwise users start complaining that
you are actually hacking my username and password for the shopping, finance and government.
So basically we don't want this to be encrypted.
So we say do not encrypt.
OK, so previously we said that now we are saying do not encrypt.
Right.
So basically what we are saying, you remember when we dumped some kind of previously within the rules
for our if you remember, we done the risk for risk five blocks on application is for an ex-wife.
And on top of it, we created a rule that, OK, like this one.
Block this four and five, and on top of it, we allow this forward and it's five.
Similarly for the description point of view, if you do not want to decrypt some of the traffic or some
of the website, like shopping, government and finance.
We do not want to decrypt it because otherwise users will start complaining.
Now, this is a decrypted rule we need to put on the top.
So that's why I'm taking any clone from the previous rule and I just modified it, so this is my Nourredine.
This is my thinking.
If I put this after the policy, that will be never hit.
So I need to put this on the top.
Let me push this.
OK, which to the firewall's.
So right now, when we go to the HSBC website, you can see our certificate will be the certificate,
which is provided by our firewall, and he's inspecting even the HSBC, my username and password from
a user as well.
So look at the certificate.
It is a trusted one because they'll start trusting the certificate when you go to, for example, Amazon
Web site.
So you'll see it will be inspected as well as if you use username and password, that password will
be decrypted, right, because normally it's encrypted so that traffic can be visible to anyone in your
company.
So company policy saying that do not expect any shopping website, do it because trust them.
OK.
See, C40 local, but now we are pushing this, too.
We do not want to think about we the website.
There are some category every website created in the world.
It has some kind of category.
OK, so we categorize that do not inspect financial government and shopping website.
OK, do not think that's the action we have defined previously.
We encrypted everything.
Alexi, the changes are completely let's go into our.
And we can go to the HSBC now.
Now, you see, this time is a different certificate, because now we are.
Using the actual certificate by the HSBC, so they are not being.
See their strategy, right, because we are now no, we are not the intrepid dystrophy.
OK, so we can also monitor this traffic from here.
So you see this.
If you log in here.
So you see this decrypted that shows the traffic is decrypted.
OK, that show the traffic is decrypted.
You can apply, for example, the column for decryption as well here.
OK, so you see the air traffic.
You can you can select those traffic which is decrypted.
OK, so you see, these are all the graphics are decrypted as well.
OK.
Which can be visible in the logs as well here.
Clearly are certainly encrypted traffic in some cases, if it's a decrypt, it is not working or maybe
something might happen.
Some applications for some websites.
So.
So what you need to do, you need to decrypt.
You need to put them into the whitelist.
This is called whitelist, OK, in the other whitelist.
And then you can actually make sure you do not think because the encryption actually what happened to
it sucks a lot of power from the firewall and it can actually do some application and some Vural can
suffers.
Here.
So that's the end of the exception for decryption.
And.