Allow Access to the AquaSnap App

If the AquaSnap app won't login as expected, you can make the AquaSnap app available.

Procedure

1. Create a custom category with these settings:
   • Name: AquaSnap
   • Domain/URL filtering:
     • 52.30.222.148
     • api.mycognition.com
2. Create a new Do not inspect HTTPS inspection policy with your new category and these settings:
   • Who: Everyone, or the relevant user or groups to apply this policy to.
   • What: AquaSnap
   • Where: Everywhere, or the relevant location to apply this policy to.
   • When: Always, or the relevant time slot to apply this policy to.
   • Action: "Do not inspect"
3. Move the policy above the other Decrypt and inspect policies in the HTTPS inspection policies table.
4. Create a new transparent authentication policy with these settings, see Creating authentication policies:
   • Step 1: What:
     • Type: "Transparent"
     • Method: "No authentication" or as appropriate, see Authentication Methods.
     • Behavior: "Allow Transparent HTTPS incompatible sites and filter others using name from certificate"
   • Step 2: Where: "Everywhere" or as appropriate.
   • Step 3: Options for unauthenticated requests: "Unauthenticated IPs"