topic SSH Tunnels in General Topics https://live.paloaltonetworks.com/t5/general-topics/ssh-tunnels/m-p/39926#M29275 <HTML><HEAD></HEAD><BODY><P>I know in order to look inside the SSH traffic to see if someone is doing SSH Tunnels you need to decrypt the SSH session.</P><P></P><P>I am looking to find out how the PAN decrypts the SSH traffic and what is all involved in setting this up on the firewall.</P></BODY></HTML> Wed, 25 Jan 2012 11:42:48 GMT snormoyle 2012-01-25T11:42:48Z SSH Tunnels https://live.paloaltonetworks.com/t5/general-topics/ssh-tunnels/m-p/39926#M29275 <HTML><HEAD></HEAD><BODY><P>I know in order to look inside the SSH traffic to see if someone is doing SSH Tunnels you need to decrypt the SSH session.</P><P></P><P>I am looking to find out how the PAN decrypts the SSH traffic and what is all involved in setting this up on the firewall.</P></BODY></HTML> Wed, 25 Jan 2012 11:42:48 GMT https://live.paloaltonetworks.com/t5/general-topics/ssh-tunnels/m-p/39926#M29275 snormoyle 2012-01-25T11:42:48Z Re: SSH Tunnels https://live.paloaltonetworks.com/t5/general-topics/ssh-tunnels/m-p/39927#M29276 <HTML><HEAD></HEAD><BODY><P>Basicaly you have to configure a Decryption Policy under Policies&gt;Decryption. I'd start by reading the PAN help, search ssh-tunnel, and the Tech Note “Controlling SSL Decryption,” for instructions on managing SSL certificates to avoid certificate mismatch errors, and “Controlling SSL Decryption” might be a good start as well.</P></BODY></HTML> Wed, 25 Jan 2012 13:35:13 GMT https://live.paloaltonetworks.com/t5/general-topics/ssh-tunnels/m-p/39927#M29276 bjdraw 2012-01-25T13:35:13Z