App-ID | SSL Decryption

suba_muthuram — Mon, 06 Mar 2023 18:11:33 GMT

Hi all,

Do we need to enable SSL Decryption to identify the apps in palo alto.

What is the relation between SSL Decryption and the App-ID in Palo Alto.

Re: App-ID | SSL Decryption

TomYoung — Mon, 06 Mar 2023 21:14:45 GMT

The NGFW can identify some SSL apps without decrypting (LinkedIn in the following example), but many SSL apps can only be identified by decrypting (YouTube in the following example). https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVSCA0

If you want granular control of SSL apps, then you need to decrypt.

Thanks,

Tom