SSL Decryption

[rrau]

Want to enable this feature.. is there a guide I can follow to start configuring and testing?

[R_]

Decryption is triggered by Decryption Policies.

Add one and test it out. You can use URL categories if you have URL filtering license to only decrypt specific Web site categories.

SSL forward proxy - outgoing SSL

SSL Inbound - SSL inbound ( if you have a copy of the servers key)

SSH forward proxy - outgoing SSH

Don't forget to generate the certificate needed if you are decrypting outbound connections.

https://live.paloaltonetworks.com/docs/DOC-1412

[HULK]

Hello Rrau,

Please find below mentioned DOCs, it might help you to understand the basic functionality of SSL decryption and how to implement this on a Palo Alto firewall.

How to Implement SSL Decryption

How to Temporarily Disable SSL Decryption

How to View SSL Decryption Information from the CLI

Difference Between SSL Forward-Proxy and Inbound Inspection Decryption Mode

How to Exclude a Single URL from SSL Decryption

Controlling SSL Decryption

SSL Decryption Certificates

Hope this helps.

Thanks