topic Re: Filtering on &quot;decrypted&quot; in General Topics https://live.paloaltonetworks.com/t5/general-topics/filtering-on-quot-decrypted-quot/m-p/50925#M37480 <HTML><HEAD></HEAD><BODY><P>To look at live sessions that are being decrypted, the following command from CLI can be used:</P><P>admin@PA-500&gt; show session all filter ssl-decrypt yes</P><P></P><P>Within traffic logs, by clicking on the magnifying glass next to a log entry, the traffic log details can be seen wherein if the session was decrypted, the 'Decrypted' checkbox should be checked.</P><P>To filter on such logs, the following filter in the traffic logs can be used:</P><P>(flags has proxy)</P></BODY></HTML> Mon, 26 Nov 2012 15:01:16 GMT goku123 2012-11-26T15:01:16Z Filtering on "decrypted" https://live.paloaltonetworks.com/t5/general-topics/filtering-on-quot-decrypted-quot/m-p/50924#M37479 <HTML><HEAD></HEAD><BODY><P>Is it possible to set a filter in traffic log (or others) to only show SSL decrypted traffic ?</P></BODY></HTML> Mon, 26 Nov 2012 07:58:59 GMT https://live.paloaltonetworks.com/t5/general-topics/filtering-on-quot-decrypted-quot/m-p/50924#M37479 dieter_b 2012-11-26T07:58:59Z Re: Filtering on "decrypted" https://live.paloaltonetworks.com/t5/general-topics/filtering-on-quot-decrypted-quot/m-p/50925#M37480 <HTML><HEAD></HEAD><BODY><P>To look at live sessions that are being decrypted, the following command from CLI can be used:</P><P>admin@PA-500&gt; show session all filter ssl-decrypt yes</P><P></P><P>Within traffic logs, by clicking on the magnifying glass next to a log entry, the traffic log details can be seen wherein if the session was decrypted, the 'Decrypted' checkbox should be checked.</P><P>To filter on such logs, the following filter in the traffic logs can be used:</P><P>(flags has proxy)</P></BODY></HTML> Mon, 26 Nov 2012 15:01:16 GMT https://live.paloaltonetworks.com/t5/general-topics/filtering-on-quot-decrypted-quot/m-p/50925#M37480 goku123 2012-11-26T15:01:16Z Re: Filtering on "decrypted" https://live.paloaltonetworks.com/t5/general-topics/filtering-on-quot-decrypted-quot/m-p/50926#M37481 <HTML><HEAD></HEAD><BODY><P>Great info, thank you</P></BODY></HTML> Tue, 27 Nov 2012 07:44:06 GMT https://live.paloaltonetworks.com/t5/general-topics/filtering-on-quot-decrypted-quot/m-p/50926#M37481 dieter_b 2012-11-27T07:44:06Z