Network Integration Guide › Decoding SSL Communications › How to Set up SSL Decode › Include or Exclude IP Ranges from SSL Decoding › Exclude an IP Range

Exclude an IP Range

To exclude IP ranges from decryption, add network filters for IP addresses.

To exclude servers by IP address:

1. Log on to the NBA console and go to the Filters tab.
2. Create a network filter.
3. Enter the following parameters.

   IP Addresses:

   Enter the IP range that you want to exclude, for example:

   10.20.0.12:443

   Protocols

   TCP

   Action

   ignore

   The excluded IP address in this example has a smaller range than the included IP addresses. The excluded IP range therefore takes precedence over the included IP range. Consequently, SSL traffic from this address is ignored and not decrypted.