SSL Inspection Causing issues with Citrix Sharefile Uploads Completing

[Gregory_Link]

We utilize Citrix Sharefile for large file uploads and sharing.  We are running into issues where it looks like traffic is being inspected going to sharefile CDN hosted in Cloudfront doesn't like the traffic being inspected and is killing the upload around ~90MB if the file is larger than that but sharefile supports much larger files.  There doesn't appear anyway to bypass the traffic by domain effectively and there aren't any updatable objects for me to utilize for sharepoint.  Attached screenshot of inspected traffic.  We have bypassed storage-cf-us.sharefile.com and *.storage-cf-us.sharefile.com but it doesn't seem to have any effect.

Any advise here on getting this working how we want it.  We don't want to bypass all sharefile traffic because we have specific rules on sharefile upload and download to restrict user groups, but I would think there would be a better way to address this.

[_Val_]

Please use Citrix updatable object in the exclusion rule, as described in sk131852. 

[Gregory_Link]

We put in a selective bypass based on user role as the source and sharefile services as the destination for the HTTPS Bypass, but traffic is still being inspected for what appears to be cloudfront, so that looks to be the real culprit here.  However, there are a lot of cloudfront services under AWS, not really sure which ones would specifically correspond to sharefile.

[the_rock]

This is a tricky one. I had same issue with customer last year for a different sharefile product and we must have spent 3-4 months with escalation team working on it and finally got it going, but I am trying to remember how we did it. I know we ended up adding bunch of custom application site objects in the category column of the https inspection policy. 

Happy to do remote and help you out. Im certain I would be able to figure it out.