SSL Termination at Palo Alto NGFW

pvrm123 — Tue, 05 Dec 2023 21:22:53 GMT

Can Palo Alto NGFW support SSL Termination
ConsumerAPP (2Way SSL) --> Palo Alto NGFW support --> (1Way) to Service provider

Re: SSL Termination at Palo Alto NGFW

akuzhuppilly — Mon, 11 Dec 2023 02:55:24 GMT

Hello @pvrm123

PaloAlto firewall supports both inbound and outbound SSL decryption.

In Inbound Inspection mode, PAN-OS will not act as a proxy with SSL traffic that matches the policy. Instead, PAN-OS will attempt to decrypt this SSL traffic 'on-the-fly' by eavesdropping on the SSL handshake and using the associated Certificate (Key Pair) configured in the decryption policy.

For more details, you can refer to the following Knowledge Base (KB) article:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV8CAK

topic SSL Termination at Palo Alto NGFW in Next-Generation Firewall Discussions

SSL Termination at Palo Alto NGFW

Re: SSL Termination at Palo Alto NGFW