Hi everyone! I'm new to setting up Zero Trust policies, so I'm hoping for a little guidance.
We just started using Cloudflare One and turned on SSL decryption for security. But right away, some of our SaaS apps started having weird issues—like login loops or buttons not working. Our sales team uses a few tools that seem to be breaking.
I was told to make a bypass list for these apps. So far, I've added `*.okta.com` and `*.salesforce.com` based on some articles, and it helped. But I'm nervous I'm missing important ones, or that my rules are too broad.
Could anyone share what domains you typically bypass for SSL inspection? Especially for common sales and marketing tools? I want to make sure our team can work, but also keep things as secure as we can. Thanks! 😅