Wildfire without SSL Decryption

bafergel — Fri, 30 Jul 2021 16:58:54 GMT

We are looking at Wildfire for our PA firewalls however, we are not doing any SSL decryption. Going into it I figured we only be and to use it on unencrypted traffic. But looking at the Wildfire datasheet under file support it lists TLS and SSL files. I'm confused how that would work at the firewall itself couldn't actually read it. Is it saying it's only supported if you decrypt these files, thus no longer making them TLS/SSL? Or do we truly receive the full benefit of Wildfire without decryption?

Re: Wildfire without SSL Decryption

Remo — Fri, 30 Jul 2021 17:41:50 GMT

Hi @bafergel

This is written a little bit confusing, but I think the last part there belongs to links in emails which means if a link to a file in an email points to an URL with https it is supported that wildfire downloads this file and executes it in the wildfire sandbox. Without decryption you definately don't receive the full benefit of wildfire.

topic Wildfire without SSL Decryption in General Topics

Wildfire without SSL Decryption

Re: Wildfire without SSL Decryption