Select Tunnel to always permit the request and provide the client certificate to the server.

Select Create incident to specify how Content Gateway should handle that certificate and site. This is the only way to specify a disposition other than tunnel. See The incident report for a list of possible dispositions.