Cisco Cisco Web Security Appliance S670 User Guide

Verify the Enable HTTPS Proxy field is enabled.

In the Transparent HTTPS Ports field, enter the ports the appliance should check 
for HTTPS traffic. Port 443 is the default port.

This field appears only when the appliance is deployed in transparent 
mode.

In the HTTPS Transparent Request section, choose how the Web Proxy handles 
transparently redirected HTTPS transactions it receives before an HTTP request 
that was authenticated using an identity with an IP-based surrogate. Select one of 
the following options:

Decrypt the HTTPS request and redirect for authentication

Deny the HTTPS request

This setting only applies to transactions that use IP address as the authentication 
surrogate and when the user has not yet been authenticated. 

For more information, see 

This field only appears when the appliance is deployed in transparent 
mode.

In the Applications that Use HTTPS section, choose whether or not to enable 
decryption for enhanced application visibility and control.

Enabling this setting allows the Web Proxy to detect applications that use HTTPS 
with better accuracy. This setting supersedes the “Pass Through” decision made 
by the Web Reputation Filters as configured in the Decryption Policies. However, 
the URL category decision still applies.

Decryption may cause some applications to fail unless the root certificate 
for signing is installed on the client. For more information, see 

. For more information on 

the appliance root certificate, see