WSA proxy - Anyconnect vpn exclusion

[tamaszoltan]

Hello,

I have a problem with the WSA proxy and Anyconnect VPN clients. We would like to implement a WSA proxy in explicit proxy mode in our environment (~2000 nodes) and decrypt the ssl traffic. Our users use Anyconnect vpn clients with a lot of different vpn server connections from inside (from our LAN through the proxy) to outside (other companies). When the WSA terminate an ssl vpn connection the connection is failed because the decryption. It is possible to exclude the ssl decryption with a custom url list but it is hard to collect the vpn gateway IP addresses.
Are there any way to exclude the VPN traffic generally from the decryption? Or it possible to configure a different proxy setting to the anyconnect than the IE?

Thanks!

[balaji.bandi]

How is your configuration, is this PAC file or WPAD.
Either case you can by pass proxy for that url in WPAD or PAC file config, and make a rule in WSA for the same and test.