TRITON - Web Security Help, Version 7.7 - Websense

Scanning and SSL Decryption Bypass OptionsSSL decryption bypassTRITON - Web Security Help | Web Security Solutions | Version 7.7.xWhen Content Gateway is configured to use SSL Manager to handle encrypted traffic:Category settings can be used to specify categories of Web sites for whichdecryption and inspection are bypassed.A list of client IP addresses and IP address ranges can be created to specify trustedclients for which decryption and inspection are bypassed.A list of destination hostnames, IP addresses, and IP address ranges can be createdto specify trusted destination servers for which decryption and inspection arebypassed.Category settingsFor Category settings, a predefined Privacy Category group includes categories thatmay be subject to regulatory requirements.Default privacy categories include:EducationFinancial Data and ServicesGovernmentHealthOnline Brokerage and TradingPrescribed MedicationsTraffic that involves Web sites in these categories may include personal identificationinformation that should not be decrypted. In order to avoid liability for inspecting thistype of information, you may want to specify some or all of these categories fordecryption bypass. End users can determine that the Web site they are viewing is notdecrypted by verifying that the certificate is the original for that site.Use Settings > SSL Decryption Bypass to select the default privacy categories forSSL decryption bypass:1. Click the Select Privacy Categories button. Check boxes for the Web sitecategories that constitute the default group are selected in the Category Bypassbox.2. Click the arrow to the right of the category tree to add the privacy categories to theCategories selected for SSL decryption bypass box.You can create your own set of categories for SSL decryption bypass. On the SSLDecryption Bypass page, specify individual Web site categories for which decryptionis not performed:1. Click a check box to select a category or subcategory for bypass.TRITON - Web Security Help 205