topic SSL Decryption in General Topics

SSL Decryption

rrau — Thu, 17 Jul 2014 13:43:22 GMT

Want to enable this feature.. is there a guide I can follow to start configuring and testing?

Re: SSL Decryption

R_ — Thu, 17 Jul 2014 14:17:44 GMT

Decryption is triggered by Decryption Policies.

Add one and test it out. You can use URL categories if you have URL filtering license to only decrypt specific Web site categories.

SSL forward proxy - outgoing SSL

SSL Inbound - SSL inbound ( if you have a copy of the servers key)

SSH forward proxy - outgoing SSH

Don't forget to generate the certificate needed if you are decrypting outbound connections.

https://live.paloaltonetworks.com/docs/DOC-1412

Re: SSL Decryption

HULK — Thu, 17 Jul 2014 15:43:26 GMT

Hello Rrau,

Please find below mentioned DOCs, it might help you to understand the basic functionality of SSL decryption and how to implement this on a Palo Alto firewall.

How to Implement SSL Decryption

How to Temporarily Disable SSL Decryption

How to View SSL Decryption Information from the CLI

Difference Between SSL Forward-Proxy and Inbound Inspection Decryption Mode

How to Exclude a Single URL from SSL Decryption

Controlling SSL Decryption

SSL Decryption Certificates

Hope this helps.

Thanks