SSL Inspection Apple Sites

SSL resigning is occurring on certain apple sites e.g. (apple.com and app store). We have exempted the required URLs that are posted in the following documents for SSL bypass:
https://help.zscaler.com/zia/public-key-pinning-and-zscaler
https://support.apple.com/en-us/HT210060

In the logs, it shows that SSL inspection is not occurring however, apple.com will not load from Safari and if you open in Private mode you can see the ZScaler cert resigning the traffic.

We are running Z-tunnel 1.0 and we have IPv6 disabled. Other Apple modules work as intended such as imessage and apple music after the SSL bypasses were put into place, we are just stuck on apple.com and the app store at this time.

Any ideas?

1 Like