topic Re: SSL Decrypt in General Topics https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt/m-p/8498#M6275 <HTML><HEAD></HEAD><BODY><P>Can you explain your SSL decryption rule and security policy?</P></BODY></HTML> Wed, 23 Feb 2011 21:36:38 GMT mharding 2011-02-23T21:36:38Z SSL Decrypt https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt/m-p/8497#M6274 <HTML><HEAD></HEAD><BODY><P><SPAN>Does using a Trusted CA from GoDaddy work with SSL Decrypt? Right now when I enable the SSL Decrypt for any catagory it flat blocks them with nothing more than a Cannot display page. I tried to decrypt gmail as a test but it just blocked it even though users are allowed to get there. When I go to </SPAN><A class="jive-link-external-small" href="http://www.facebook.com">http://www.facebook.com</A><SPAN> I get the app denied page when I try to do the same thing with </SPAN><A class="jive-link-external-small" href="https://www.facebook.com">https://www.facebook.com</A><SPAN> I get a cannot display. HELP! I love the box but I feel like I am missing something with this feature. FYI Using 3.1.7.</SPAN></P></BODY></HTML> Wed, 23 Feb 2011 21:04:53 GMT https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt/m-p/8497#M6274 mdusterhoft 2011-02-23T21:04:53Z Re: SSL Decrypt https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt/m-p/8498#M6275 <HTML><HEAD></HEAD><BODY><P>Can you explain your SSL decryption rule and security policy?</P></BODY></HTML> Wed, 23 Feb 2011 21:36:38 GMT https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt/m-p/8498#M6275 mharding 2011-02-23T21:36:38Z Re: SSL Decrypt https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt/m-p/8499#M6276 <HTML><HEAD></HEAD><BODY><P>You can not purchase a cert for SSL FORWARD PROXY. You need to use the Paloalto self signed cert or set up a local CA and generate a cert.&nbsp; Do a search for DOC-1384 for a procedure.</P><P></P><P>Steve Krall</P></BODY></HTML> Fri, 29 Jul 2011 19:23:05 GMT https://live.paloaltonetworks.com/t5/general-topics/ssl-decrypt/m-p/8499#M6276 skrall 2011-07-29T19:23:05Z