topic Re: SSL decryption policy for all HTTPS traffic in General Topics

SSL decryption policy for all HTTPS traffic

MMCiobanu — Mon, 10 Mar 2014 21:43:55 GMT

Hi,

Is there a way to have a policy for the purpose of not decrypting all https traffic?

Thank you.

Re: SSL decryption policy for all HTTPS traffic

HULK — Tue, 11 Mar 2014 06:52:48 GMT

Hello Sir,

If i understand your requirement correctly, are you looking for an option to bypass Decryption policy. If so, there is a facility to negate source and destination address as mentioned below.

Thanks

Re: SSL decryption policy for all HTTPS traffic

MMCiobanu — Tue, 11 Mar 2014 17:04:13 GMT

What I would like is, to be able to NOT DECRYPT any web browsing traffic on port 443.

I have looked at creating a Decryption Policy Rule, but I don't have an option to add the application, it is only seem to be based on source and destination, as well as URL category.

Re: SSL decryption policy for all HTTPS traffic

jvalentine — Tue, 11 Mar 2014 17:07:08 GMT

That's the problem... the application _IS_ SSL until you decrypt it. You must decrypt it in order to see what is inside.