Test Selective Decryption

You can test that the website or other destination you want to visit will not be inspected by the intelligent proxy when the intelligent proxy is enabled.

Prerequisites

• Full admin access to the Umbrella dashboard. See Manage User Roles.
• The Cisco Umbrella root certificate installed. See Install the Cisco Umbrella Root Certificate.

Procedure

To create a test that the website or other destination you want to visit will not be inspected by the intelligent proxy when the intelligent proxy is enabled:

1. Navigate to Policies > Management > All Policies.

2. Within a test policy, enable the intelligent proxy, including enabling SSL decryption and installing the Cisco root certificate.
   Do not enable selective decryption.

3. Create a destination block list and add a destination that is a member of the content category you will later add to the selective decryption site for this test. See Add a Destination List.
   For example, the content category we will use for this example is News. Add cnn.com to the block list.

4. Navigate to cnn.com and view the browser certificate. It should be the Cisco root certificate.
5. Create a selective decryption list and add the News content category to it.

6. Navigate to www.cnn.com and view the browser certificate. It should be CNN's certificate.

---

Test the Intelligent Proxy < Test Selective Decryption > Review the Intelligent Proxy Through Reports