<h2>TLS/SSL Inspection and ScreenMeet Compatibility</h2><h3>Overview</h3><p>This article is intended for IT and network security administrators in environments where TLS/SSL inspection (also called SSL decryption or deep packet inspection) is enabled. It explains how TLS inspection affects ScreenMeet functionality and describes the required network exception to ensure full compatibility.</p><hr><h3>How TLS Inspection Affects ScreenMeet</h3><p>TLS inspection works by intercepting encrypted traffic, decrypting it for analysis, and re-encrypting it using a certificate issued by your organization's root CA. Because ScreenMeet client software validates the certificate chain for connections to ScreenMeet servers, this interception breaks that validation. The behavior varies by feature:</p><h4>ScreenMeet Live and Remote Support (Attended)</h4><p>When TLS inspection is active, users attempting to connect to a ScreenMeet session will encounter a security warning indicating the connection may not be secure. This is expected behavior — the warning is triggered by the certificate mismatch introduced by your inspection appliance, not by an actual threat. The session may still function, but the warning will appear on every connection attempt.</p><p>Example warning text:</p><pre><code class="language-plaintext">WARNING: The connection to the support server may not be secure because of an SSL
certificate mismatch. If you are connected via a VPN, your traffic might be monitored.
Certificate Issuer: CN=[Your Organization's Root CA]. Are you sure you wish to continue?</code></pre><p></p><p>Certificate Pinning</p><p>ScreenMeet uses certificate pinning to protect against man-in-the-middle attacks. The security warning in TLS-inspected environments is a false positive caused by your organization's inspection certificate, not an indication of a real threat.</p><h4>ScreenMeet Beam (Unattended)</h4><p>Beam will not connect at all when TLS inspection is active. This is intentional — the Beam client enforces strict certificate validation and will refuse to establish a connection if the certificate chain does not match. There is no workaround for Beam other than bypassing TLS inspection for ScreenMeet traffic.</p><p></p><p>Beam Requires Bypass</p><p>Beam (unattended remote access) will not function under TLS inspection under any circumstances. A bypass exception for <code>*.screenmeet.com</code> is required for Beam to connect.</p><hr><h3>Required Configuration</h3><p>Configure your network security solution to bypass TLS/SSL inspection for all traffic to and from the following domain:</p><ul><li><p><code>*.screenmeet.com</code></p></li></ul><p>This bypass must apply to both inbound and outbound traffic. Refer to the documentation for your specific security solution below.</p><hr><h3>Configuration References by Vendor</h3><p>The following vendors are commonly deployed in enterprise environments with TLS inspection enabled. Consult the linked documentation for steps to add a bypass exception.</p><table style="min-width: 50px;"><tbody><tr><th colspan="1" rowspan="1"><p>Vendor</p></th><th colspan="1" rowspan="1"><p>Documentation</p></th></tr><tr><td colspan="1" rowspan="1"><p>Zscaler</p></td><td colspan="1" rowspan="1"><p><a target="_new" rel="noopener" href="https://help.zscaler.com/zia/configuring-ssl-inspection-policy">Configuring SSL Inspection Policy</a></p></td></tr><tr><td colspan="1" rowspan="1"><p>Blue Coat ProxySG</p></td><td colspan="1" rowspan="1"><p>Refer to your vendor documentation for SSL interception bypass rules.</p></td></tr><tr><td colspan="1" rowspan="1"><p>Cisco Umbrella</p></td><td colspan="1" rowspan="1"><p><a target="_new" rel="noopener" href="https://docs.umbrella.com/deployment-umbrella/docs/enable-ssl-decryption">Enable SSL Decryption</a></p></td></tr><tr><td colspan="1" rowspan="1"><p>Palo Alto Networks NGFW</p></td><td colspan="1" rowspan="1"><p><a target="_new" rel="noopener" href="https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/decryption/configure-ssl-inbound-inspection">Configure SSL Inbound Inspection</a></p></td></tr><tr><td colspan="1" rowspan="1"><p>Fortinet FortiGate</p></td><td colspan="1" rowspan="1"><p><a target="_new" rel="noopener" href="https://docs.fortinet.com/document/fortigate/7.6.1/administration-guide/430005/certificates">Certificates — FortiGate Administration Guide</a></p></td></tr></tbody></table><p></p><p>Other Vendors</p><p>If your security solution is not listed here, search your vendor's documentation for "SSL inspection bypass" or "decryption exclusion" and add <code>*.screenmeet.com</code> as an excluded domain.</p><hr><h3>Related Articles</h3><ul><li><p><a target="_new" rel="noopener" href="#">ScreenMeet Network and Firewall Requirements</a></p></li><li><p><a target="_new" rel="noopener" href="#">ScreenMeet Beam — Deployment Overview</a></p></li><li><p><a target="_new" rel="noopener" href="#">Troubleshooting ScreenMeet Connection Issues</a></p></li></ul><p></p>

TLS Inspection Overview

ScreenMeet 2025 Release Notes

403 Forbidden while making API request

404 NO_ACCESS

Installing ScreenMeet for Salesforce

Advanced CSS customization

AI Assist

AI Assist Overview

Overview

AI Release Notes Q4 24

Requirements

AI Summarization

AI Summary History

AI Summary Privacy

AI Summary Studio

Android SDK Quickstart

How-to: Setup the app for Laser Pointer

How-to: Display a video stream to the end-user

Egress IP Addresses

AWS S3 File Storage

Configuring ScreenMeet / Microsoft Entra ID integration

Signing into ScreenMeet console with Microsoft Entra ID (Azure AD)

Beam Client: Installation, Deployment, and Configuration Guide

Beam Groups: Setup, Settings, and Access Management

Beam Release Notes Q1 22

Beam Release Notes Q1 23

Beam Release Notes Q1 24

Beam Release Notes Q2 22

Beam Release Notes Q2 23

Beam Release Notes Q2 24

Beam Release Notes Q3 23

Beam Release Notes Q3 22

Beam Release Notes Q4 22

Beam Release Notes Q4 24

New Remote Support Client for Mac

Canvas

Certificate-Based Device Validation

Clone - Remote Support Release Notes Q4 23

Clone - Test ScreenMeet 2025 Release Notes

File Storage on AWS

Configuring Information Security & PII

Creating a Custom UI

Custom Copy

Cobrowse Demo

CoBrowse Deployments

Events

Hotkeys

Localization

CoBrowse Release Notes Q1 23

CoBrowse Release Notes Q1 22

CoBrowse Release Notes Q1 24

CoBrowse Release Notes Q2 22

CoBrowse Release Notes Q2 23

CoBrowse Release Notes Q2 24

CoBrowse Release Notes Q3 22

CoBrowse Release Notes Q3 23

CoBrowse Release Notes Q3 24

CoBrowse Release Notes Q4 22

CoBrowse Release Notes Q4 23

CoBrowse Release Notes Q4 24

Remote Control

Remove End Cobrowse Button

Cobrowse Script

Cobrowse Settings

Starting a Session with a URL

Configuration and validation troubleshooting

Configure API service

Configure ScreenMeet for a New Salesforce Sandbox

Configure ScreenMeet to only show on specified tables

Configuring Environment Variables

Configuring Webhooks for Data Sync

Connecting to ChromeOS devices

Connecting to Mac devices

Connection Information

Create Multiple Sessions

Creating a Replay Recording

Creating a session

Custom Consent Message

Custom permission configuration for ServiceNow

Custom URL

Custom Windows Tools

Deploying a Pre-installed Client

Developer Notes

Developer Notes (3.0.11)

Device Requirements

Enable ScreenMeet for Omnichannel Chat Widget

Enabling features within the Salesforce + ScreenMeet component