Review the exhibit.

When Netskope performs SSL inspection and encounters a certificate issued by an internal or private Certificate Authority (CA) that is not in its trusted store, it will generate an SSL error and block the connection. To resolve this in a corporate environment where internal CA-signed certificates are used, three valid approaches exist. First, importing the internal root CA certificate into Netskope’s trusted certificate store allows Netskope to validate the certificate chain properly. Second, creating a Do Not Decrypt (SSL bypass) rule for the affected internal sites prevents inspection altogether. Third, changing the SSL Error Settings for the self-signed or untrusted root certificate error from Block to Bypass in the Netskope tenant allows traffic to pass without a full CA import. Creating a Real-time Protection policy to allow access does not address the underlying SSL certificate validation failure.