Akamai bypass list

Akamai maintains a list of domains that bypass ETP Proxy for compliance and performance reasons.

There are also applications that send non-web traffic such as Session Initiation Protocol (SIP) or Extensible Messaging and Presence Protocol (XMPP) over TLS, utilize certificate pinning, or are incompatible with the TLS man-in-the-middle certificate that is generated or uploaded in ETP and required for ETP Proxy. ETP offers a policy setting that allows you to allow or block domains that use an unsupported protocol or are incompatible. By default, the Block Incompatible Domains policy setting is not enabled. As a result, these domains bypass ETP Proxy. To block these domains, see Allow or block domains incompatible with TLS MITM certificate.

Note: If you enable the Block Incompatible Domains setting, the Akamai domains listed in this table are not blocked.
Akamai frequently evaluates this list and may add more domains. The bypass list currently contains the following domains.
Service Domain
Akamai

akamai.com

akamaihd.net

akamaietp.net

akamaiedge.net

edgekey.net

akanev.net

akaetp.net

akamaized.net

akamai-access.com

aktrials.com

akamaitechnologies.com

akadns.net

akamaiapis.net

etp-research.info

Apple

apple.com

mzstatic.com

setup.icloud.com

gateway.icloud.com

Cisco

webex.com

wbx2.com

ciscospark.com

webexcontent.com

Dropbox

client.dropbox.com

d.dropbox.com

dropboxstatic.com

telemetry.dropbox.com

dl-debug.dropbox.com

client-web.dropbox.com

bolt.dropbox.com

dropboxapi.com

Google

mail-attachment.googleusercontent.com

apidata.googleusercontent.com

googlevideo.com

mtalk.google.com

accounts.google.com

accounts.youtube.com

googleapis.com

ssl.gstatic.com

Microsoft

watson.telemetry.microsoft.com

skype.com

data.microsoft.com

update.microsoft.com

messenger.live.com

windowsupdate.com

download.microsoft.com

wustat.windows.com

ntservicepack.microsoft.com

windowsupdate.microsoft.com

outlook.office.com

outlook.office365.com

smtp.office365.com

res.office365.com

crl.microsoft.com

ocws.officeapps.live.com

odc.officeapps.live.com

activation.sls.microsoft.com

ols.officeapps.live.com

msftncsi.com

msftconnecttest.com

ols.officeapps.live.com

Okta

okta.com

oktacdn.com

Online Certificate Status Protocol

ocsp.digicert.com

ocsp.identrust.com

ocsp.affirmtrust.com

ocsp.comodoca.com

ocsp.comodoca2.com

ocsp.comodoca3.com

ocsp.comodoca4.com

ocsp.entrust.net

ocsp.geotrust.com

ocsp.globalsign.com

ocsp.godaddy.com

ocsp.netsolssl.com

ocsp.omniroot.com

ocsp.quovadisglobal.com

ocsp.root-x1.letsencrypt.org

ocsp.starfieldtech.com

ocsp.startssl.com

ocsp.swisssign.net

ocsp.thawte.com

ocsp.trust-provider.com

ocsp.trustwave.com

ocsp.usertrust.com

ocsp.verisign.com

ocsp.wosign.com

ocsp.ws.symantec.com

ocsp1.wosign.com

ocsp2.wosign.cn

Other

ooklaserver.net

lastline.com

morganstanleyclientserv.com

myworkday.com

fwmrm.net

aa.online-metrix.net