how to bypass SSL/TLS in SOPHOS XG

Question

hi, i have XG430 , created a firewall rule and selected with following web filtering checks: 
 Block QUIC protocol Scan HTTP and Decrypted HTTPS Scan FTP for Malware Decrypt HTTP during web proxy filtering. 
 SSL and TLS inspection is enabled when user try to open linkedin.com then this site is blocked and get below error 
 URL: https://pk.linkedin.com/ Certificate details: valid from: Feb 14:00:00:00 2023 GMT Valid to Aug 14 23:59:59 2023 GMT Serial number: xx xx xx xx xx xx Subject isser SSL error: certificate has expired 
 i check the exclusion policy of ssl/tls and make it sure the linked.com is added in Local TLS exclusion list. in SSL/TLS inspection logs it is showing me that it is blocked due to invalid certificate. certificate installed on my firewall is valid. please advise how to resolve it?.

emmosophos · Answer

Hello there, 
 Following on Rfcat suggestion, what error do you see in the SSL/TLS logs when the user tries to access the site? 
 You might need to add pk.domain.com to the exclusion list, not only domain.com. 
 Regards,