In the Cloud Secure Web Gateway (Cloud SWG, and formerly known as WSS) SSL policy editor, Symantec maintains a list of applications in the SSL Bypass List and Mobile App Bypass list that are known to break when their traffic is intercepted, due to certificate pinning. The list is continually being updated; however, traffic for additional applications and domains that are not included in the list might break. For these applications and domains, Symantec recommends using the policy editor to exempt them from SSL interception.
For more information on Cloud SWG, see the Cloud SWG Solutions Dashboard.
The following table lists the applications that are in the SSL Bypass List by default:
Application | URL |
---|---|
Apple iTunes |
|
DropBox Note: If a rule exists in CASB or Elastica domains for a Dropbox URL, this exemption is ignored and traffic for this application is intercepted.
|
|
Microsoft Downloads |
|
Mozilla |
|
Mozilla Messaging |
|
Office 365 Exchange Online Note: If a rule exists in CASB or Elastica domains for an Office 365 Exchange URL, this exemption is ignored and traffic for this application is intercepted.
|
|
Skype for Business |
|
ThreatPulse |
|
TomTom |
|
WebEX Note: If a rule exists in CASB or Elastica domains for a WebEX URL, this exemption is ignored and traffic for this application is intercepted.
|
|
Windows Support |
|
Zoom |
|
The following table lists the applications that are in the Mobile App Bypass list by default:
Application |
URL |
---|---|
Adobe Photoshop Express |
|
AirBnB |
|
Amazon Alexa |
|
Apple App Store |
|
Apple iTunes |
|
Chase |
|
DropBox |
|
Facebook Messenger |
|
Google Drive |
|
Google Hangouts |
|
Join.me |
|
Lynda.com |
|
Microsoft Excel Mobile |
|
Microsoft Office Lens |
|
Microsoft OneNote |
|
Microsoft Powerpoint |
|
Microsoft Word |
|
Overwatch |
|
PayPal |
|
SoundCloud |
|
Southwest Mobile App |
|
Starcraft |
|
|
|
Vimeo |
|
Windows Apps |
|