When the site was set as an exception for HTTPS certificate validation, the behavior was changed to use "Sophos SSL Untrusted CA _..." as the decryption CA if the server certificate is untrusted.
This is only when using the DPI engine.
When the site was set as an exception for HTTPS certificate validation, the behavior was changed to use "Sophos SSL Untrusted CA _..." as the decryption CA if the server certificate is untrusted.
This is only when using the DPI engine.