topic Re: Does SSL decryption work on the Forward Proxy in tap mode? in General Topics

Does SSL decryption work on the Forward Proxy in tap mode?

JTR — Thu, 02 May 2013 09:11:06 GMT

Hello, This is Heejun from Uquest.

I'm testing SSL decryption, and read some document saying that SSL decryption won't working with Forward Proxy in tap mode.

But I heard that someone did this during previous POC. There's no way to check this right now.

So I want to hear that whether this is possible or not.

I've seen this contents in 'TechConnect - SSL Decryption- Configuration and Best Practices.'

Ah.. He used PAN OS 5.0.

Thanks a million!

Re: Does SSL decryption work on the Forward Proxy in tap mode?

kfindlen — Thu, 02 May 2013 17:46:24 GMT

Forward proxy is not supported in tap mode. Inbound decryption is supported in tap similar to other deployment modes.

Re: Does SSL decryption work on the Forward Proxy in tap mode?

JTR — Fri, 03 May 2013 08:15:02 GMT

Thank you very much for your reply.

In a nut shell, normally we use tap mode in poc, and use ssl decryption in forward proxy mode and this means that we can't not show 'ssl decryption' in poc ?

Re: Does SSL decryption work on the Forward Proxy in tap mode?

kfindlen — Fri, 03 May 2013 14:51:14 GMT

That is correct. Forward proxy would not be a testable feature in tap mode.

Re: Does SSL decryption work on the Forward Proxy in tap mode?

JTR — Mon, 06 May 2013 02:45:33 GMT

Really thanks kfindlen, you are my hero!

Have a nice day.:smileylaugh: