https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt-mirror-vlan-tagging/m-p/185724#M56785 <P>if you add a switch instead of a direct connection you can connect the mirror port to a access port in vlan 10 for example, then connect the fireeye to a trunk and allow vlan 10 and whichever other vlans you'd need</P> <P>&nbsp;</P> <P>the mirror port itself does not vlan tagging</P> Tue, 07 Nov 2017 10:58:18 GMT reaper 2017-11-07T10:58:18Z https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt-mirror-vlan-tagging/m-p/185602#M56764 <P>Hi,</P><P>&nbsp;</P><P>Wanted to start tagging the traffic going out of the decrypt mirror into our fireeye appliance. I read somewhere that tagging the decrypted traffic into the fireeye is recommended because apparently the fireeye appliance may have an issue distinguishing the normal unencrypted traffic and the decrypted traffic from the PA FW.</P><P>&nbsp;</P><P>How would I go about doing that?</P><P>&nbsp;</P><P>Thanks</P><P>&nbsp;</P> Mon, 06 Nov 2017 14:58:37 GMT https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt-mirror-vlan-tagging/m-p/185602#M56764 dedwards01 2017-11-06T14:58:37Z https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt-mirror-vlan-tagging/m-p/185724#M56785 <P>if you add a switch instead of a direct connection you can connect the mirror port to a access port in vlan 10 for example, then connect the fireeye to a trunk and allow vlan 10 and whichever other vlans you'd need</P> <P>&nbsp;</P> <P>the mirror port itself does not vlan tagging</P> Tue, 07 Nov 2017 10:58:18 GMT https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt-mirror-vlan-tagging/m-p/185724#M56785 reaper 2017-11-07T10:58:18Z