https://live.paloaltonetworks.com/t5/next-generation-firewall/ssh-proxy-decryption-issue/m-p/1238570#M6312 <P>On the PA-440 firewall, I created a decryption policy for SSH Proxy (LAN to WAN zone). When I initiate an SSH session to the same firewall’s management IP (192.168.29.25), decryption does not occur, as seen in the traffic logs. However, when connecting to another firewall’s management IP (192.168.29.206), decryption is successful. Both traffic is passing through the&nbsp; firewall data plane . Please find the below security policy and decryption policy traffic logs attachment for reference.</P> Tue, 23 Sep 2025 10:58:15 GMT v.ramanathan 2025-09-23T10:58:15Z https://live.paloaltonetworks.com/t5/next-generation-firewall/ssh-proxy-decryption-issue/m-p/1238570#M6312 <P>On the PA-440 firewall, I created a decryption policy for SSH Proxy (LAN to WAN zone). When I initiate an SSH session to the same firewall’s management IP (192.168.29.25), decryption does not occur, as seen in the traffic logs. However, when connecting to another firewall’s management IP (192.168.29.206), decryption is successful. Both traffic is passing through the&nbsp; firewall data plane . Please find the below security policy and decryption policy traffic logs attachment for reference.</P> Tue, 23 Sep 2025 10:58:15 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/ssh-proxy-decryption-issue/m-p/1238570#M6312 v.ramanathan 2025-09-23T10:58:15Z