Troubleshooting Tip: Traffic denied because of explicit proxy policy

[btey]

Description	This article describes how to resolve an issue where users cannot access certain websites and their traffic is denied because of an explicit proxy policy, even when a deep inspection SSL profile has been enabled on one of the explicit proxy policies.
Scope	SWG SSO.
Solution	Some websites are denied with a 'Traffic denied because of explicit proxy policy' message because the traffic has triggered the 'Implicit Deny' policy.  Deep inspection has enabled on the SWG policy. Check the SSL inspection profile: Go to Configuration -> Security -> SSL profile -> Configure SSL -> Check the Exemptions list.   Example of Finance and Banking category: alipay.com. Blocked page on client browser:  From the FortiSASE portal, the traffic log will show as follows: To fix the issue, remove the URL category from the SSL exemption list: