https inspection drop

[Hllrdm]

We are having a problem connecting to government websites.
We have enabled https inspection exception for these sites.
Users use special software to connect to these sites.
The first log shows accept.
But there is a second log drops with the message "The probe sent to destination has encountered a general error ", "Dropping request as configured in engine settings of HTTPS Inspection".
Can you tell me what the problem might be?

 

[G_W_Albrecht · Accepted solution]

Look at the https settings:

If it is on fail-close, the drop is not unexpected...

[Hllrdm]

And if we use fast accel for this connection, in that case drops will also be there?

[G_W_Albrecht]

Why the question - either the connection is https inspected or excluded from that. Acceleration should not make any difference afaik. Here, a probe is sent to the site that fails for some reason - used cipher not supported, SNI verification failed or else. I would do an exclusion for government websites as they should not contain malware and customer is connecting using special apps.