Users in your network are attempting to reach a website that has a self-signed certificate using a GRE tunnel to Netskope. They are currently being…

To allow traffic from a website with a self-signed certificate that is being blocked by Netskope with

an SSL error, the correct action is to configure a Do Not Decrypt SSL Decryption rule. This rule will

allow the traffic to pass without being decrypted, thus bypassing the SSL error caused by the self-

signed certificate. This is a common practice for handling traffic from trusted internal applications or

specific external sites that use self-signed certificates1.

Reference: The Netskope Community Forum discusses the application of exceptions for sites with

self-signed certificates and the use of SSL decryption policies to bypass the blocking1. Additionally,

the Netskope Knowledge Portal provides information on managing error settings and configuring SSL

decryption rules2.