Guides
ProductDeveloper
Guides

Test Selective Decryption

You can test that the website or other destination you want to visit will not be inspected by the intelligent proxy when the intelligent proxy is enabled.

Prerequisites

Procedure

  1. Navigate to Policies > Management > DNS Policies.
1114
  1. Within a test policy, enable the intelligent proxy, including enabling SSL decryption and installing the Cisco root certificate.
    Do not enable selective decryption.
1000
  1. Create a destination block list and add a destination that is a member of the content category you will later add to the selective decryption site for this test. See Add a DNS Destination List.
    The content category we will use for this example is News. Add cnn.com to the block list.
1039
  1. Navigate to www.cnn.com and view the browser certificate. It should be the Cisco certificate.
  2. Create a selective decryption list and add the News content category to it.
450
  1. Navigate to www.cnn.com and view the browser certificate. It should be CNN's certificate.
589

Test the Intelligent Proxy < Test Selective Decryption > Review the Intelligent Proxy Through Reports