Encrypted Traffic Filteriring vs Ssl Decryption of Url Filtering.

Hello everyone,

For url filtering ,It is done in 2 ways. I did it practically in 2 examples. I installed the number 1 on computers.

1) SSL Encrypted traffic detection( Decryption https traffic)

 Since it will do decrypt first, it will tire the Firewall.But it gives more accurate results

2)SSL encrypted traffic detection(Blocking https traffic)

blocks incoming https requests based on the url pre-defined that matches the rules

But false positive ?

 3)Encrypted Traffic Filtering of Url Filtering

 It does not tire the firewall,  but not good results based on url filtering

(The place where it is activated is “Filter Encrypted traffic” in “Url Filtering”.)

I want to block some of the predefined categories without missing any (15-16 predefined category)

There are 200 clients.. I want FW not to get tired..

Which one is the right one to apply. How is it done in al lot of  organizations?

Which one should I apply to the predefined categories that I will block?

For example, why would I decrypt a malicious websites?