Hi @sba_ironport
the TCP_DENIED/407 is Explicit Proxy Authentication Required
so I assume you are using Explicit Proxy mode.
to be able to bypass traffic in Explicit Mode, you need to bypass it from Client side, if you are using PAC file, You can bypass there, else you need to bypass in the Browser.
kindly note that TCP_DENIED/407 is expected, WSA will ask for user credentials, so we need to check other access logs line as well to see what is the final decision.
another thing I need to double check with you, is please consider the order of your Custom URL categories, Decryption policy and Access policy, please note that, they are prioritized from Top to down, so make sure they are placed in proper position.
and one last thing, while you mentioned bypass, did you mean Passthrough in the Decryption Policy, or Bypass list in the WSA?
Regards,
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
