SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

SSL Decryption Resources

Palo Alto Networks Delivers

SSL Decryption Information SSL Decryption Info SSL Decryption Information

Discover the numerous benefits of SSL Decryption for your network environment. Learn more

SSL Decryption Technical Documentation SSL Decryption Technical Documentation SSL Decryption Documentation

Read how to configure and utilize SSL Decryption to enhance your network security. Learn more

Tutorials

SSL Decryption Discussions

Have questions about SSL Decryption? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
Sep 27, 2018 10:40:11 AM

SSL decryption troubleshooting - decrypt-cert-validation

I have been working with SSL decryption over 4 month on testing team. Most of the traffic is OK but I see some of the traffic are being Aged-Out ...

80 5
4 weeks ago

SSL decryption and load on Management plane

Need to confirm if we enable ssl decryption will that put load on MP? https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_ca...

45 3
Sep 27, 2018 10:39:08 AM

QoS and SSL decryption questions.

Seems some of our customers are trying to slow down youtube, facebook etc. without SSL decryption. The confusing part is in the logs these show u...

35 3
Oct 12, 2018 1:57:04 PM

ssl decryption and policy deny

 I have configured ssl decryption and rule is there to allow the traffic IT is hitting the right rule but policy says denied?  wha...

48 5
Sep 18, 2018 6:42:32 AM

SSL Decryption just some users

Hello everybody, I'm struggling thinking how i can do this. I've implemented SSL Decryption in the Palo Alto FW and i just tried with two IP's&nb...

60 8