You need to exempt traffic from SSL Interception in Cloud SWG (formerly known as WSS). For example, Banking and Healthcare categorized sites are often exempted for compliance reasons.
To add a destination or source to SSL Interception exemptions:
For additional information on SSL Interception, please visit the following topic:
About Scanning Encrypted Traffic
Note: After the SSL exemptions are added to the list, the Web Security Service will NOT SSL-decrypt traffic from these sources or to these destinations. Currently, traffic sent from a mobile device (iOS or Android) is always exempted from SSL Interception.
Note: Please make sure SSL exception rule is added on top of SSL interception rule (if any for the same URL or category) in order to take priority.