Can the VM Firewall decrypt, inspect, and re-encrypt SSH traffic?

JimmyChernega — Tue, 08 Aug 2023 15:33:23 GMT

We have to use SFTP, which uses SSH, for some AWS transfers. We wish to do deep packet inspection. Can the PA VM-FW accomplish that? Thanks.

Re: Can the VM Firewall decrypt, inspect, and re-encrypt SSH traffic?

TomYoung — Tue, 08 Aug 2023 18:22:56 GMT

On this URL -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-concepts/ssh-proxy, scroll down to the bottom, last sentence under #7. "The firewall only looks for SSH port forwarding, it does not perform content and threat inspection on SSH tunnels." It only blocks the ssh-tunnel app.

Thanks,

Tom