topic Re: show system setting ssl-decrypt certificate-cache in General Topics

show system setting ssl-decrypt certificate-cache

MP18 — Mon, 29 Oct 2018 17:36:04 GMT

Need to confirm output of this command is when user access the ssl website it is the cert of that website the get cached in the firewall?

Re: show system setting ssl-decrypt certificate-cache

JW6224 — Mon, 29 Oct 2018 17:46:51 GMT

That's correct. The cache space is limited, so you will only see recent certificates cached if you have a busy firewall. But the certificates in that certificate cache are placed there when the firewall retrieves the certificate for a traffic flow that matches an SSL Forward Proxy decryption policy.

See these KB's:

How to View SSL Decryption Information from the CLI

How to Prevent Access to Encrypted Websites Based on Certificate Authority (Check out Step 7)

Re: show system setting ssl-decrypt certificate-cache

MP18 — Wed, 31 Oct 2018 14:43:15 GMT

MAny thanks for the reply back