Technical Tip: SSL exemptions are not working

SSL exemptions are configured as FQDN or web categories. 

One of the following changes should be made:

Option 1:

config firewall ssl-ssh-profile
    edit "profile_name"
        config https
            set cert-probe-failure allow
        end
    end

Option 2:

config firewall ssl-ssh-profile
    edit "profile_name"
        config https
            set sni-server-cert-check disable
        end
    end

Related article:
Technical Tip: Exempting applications/domains/websites from Deep SSL Inspection