Hoping someone else may have some information on this -
We use SSL Proxy Profiles for our SRX340/345s - and we see an intermittent issue where a URL pattern that we have exempted in SSL profiles will suddenly have issues with the SSL proxy feature. Our fix that has been working fairly consistently is removing the URL pattern from the SSL proxy feature and the UTM profiles, then re-adding the entries. It seems to occur the most with government websites like https://bsaefiling.fincen.treas.gov/main.html - but has occurred with other sites with SSL certificates. Note that the feature itself works for 99 percent of the other URLs that are being exempted, it will just occur with one or two sites every couple of months or weeks. Since removing and re-adding the specific URL seems to fix the issue, we were thinking that there may be something cached on the SRXs that maybe doesn't match changes to the site so it reprocesses it through the SSL proxy. Any insight into the feature would be helpful, as we're not really sure if this is a problem with the SRX or with the websites themselves.