Tutorial: SSH Decryption

[jdelio]

Keeping your network secure is a full time job, especially when trying to prevent SSH Tunneling of unwanted traffic while simultaneously allowing normal SSH sessions. If you do not have the ability to decrypt SSH sessions, then you will never see what is really happening in those SSH tunnels.

Enabling SSH decryption exposes SSH Tunneling within SSH sessions to the Palo Alto Networks Security Policy such that it is easy to differentiate between the two types of traffic. This tutorial video highlights both the problem and the solution.

Please watch this video by John Cone.

Thanks for reading.

Stay Secure.

Joe Delio