topic Re: POP3S question in General Topics

POP3S question

Retired Member — Thu, 30 Apr 2015 17:34:02 GMT

Hi,

Does anyone know how Palo Alto Networks handles POP3S? I checked the applipedia, and there is no individual application for it. It is also not a part of the POP3 application as far as I can tell. Any help you can provide is greatly appreciated.

Thanks,

Emma

Re: POP3S question

aabdelhali — Fri, 01 May 2015 21:17:37 GMT

Hello Emma

Please check this document:

https://live.paloaltonetworks.com/docs/DOC-4973

Amjad

Re: POP3S question

Retired Member — Fri, 01 May 2015 22:20:43 GMT

Hi Amjad,

Okay so seems like the app will be SSL if you don't decrypt it. If you decrypt it will be pop3.

Thanks!

Emma

Re: POP3S question

Fraccaro — Tue, 19 Apr 2022 10:47:50 GMT

Sorry to bring up this tread after sevral years. I have the same problem trying to decrypt POP3 SSL and/or IMAP SSL (and unfortunately I get access denied while trying to open the link in the proposed solution).

Can anyone shade some light on how to decrypt these protocols?

Thanks in advance!

Re: POP3S question

emr_1 — Wed, 20 Apr 2022 08:49:40 GMT

1. generate self signed CA cert or import your enterprise CA into PA device.

2. create decryption rule focused on TCP995 (=POP3S) #change port if you are using different number or IMAP SSL

3. on your client side, import above CA cert and trust it. If you are using Mozilla Thunderbird, don't mistake import place. It's not mmc>cert util, it should be under setting in Thunderbird

That's it.

I am able to decrypt my gmail traffic (pop3s) with my PA box without any issue.

Re: POP3S question

Fraccaro — Wed, 20 Apr 2022 12:14:50 GMT

Thanks for the quick reply,

I'll try to apply your suggestions.Hopefully half of the problem is solved 😉

We use "POP Beamer" as client (a pop connector for MS Exchange) and now I have to study how to apply the certificate.

Thanks!