Issue Description

Configured decryption policy and PC installed certificate but website still using own server certificate

Handling Process

1. Perform packet on NGAF, there is no DNS traffic from PC when accessing website
2. Point PC gateway as NGAF LAN IP
3. Perform packet capture again, PC DNS traffic able to pass through NGAF now
4. Website using SANGFOR certificate now

Solution

Make sure PC DNS traffic able to pass through NGAF so that decryption able to take effect