My customer is getting the error Your request could not be processed because of a configuration error. “Failure to authenticate a tunneled SSL request…”. Customer’s setup is Transparent and authenticates using IWA. Error is seen when unauthenticated user accesses a blocked category or URL and no SSL intercept action is performed. I tried creating an SSL Intercept policy with User Authentication Error or User Authorization Error as source and selected auth_ssl_intercept error (tried two others as well) and proxy was able to display the Policy denied exception page. However, I’m not sure if this is the best solution to the error. Customer is thinking of switching from SSL Proxy to TCP Tunnel Proxy but I’m not sure what the impact will be on their existing setup.