SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

SSL Decryption Resources

Palo Alto Networks Delivers

SSL Decryption Information SSL Decryption Info SSL Decryption Information

Discover the numerous benefits of SSL Decryption for your network environment. Learn more

SSL Decryption Technical Documentation SSL Decryption Technical Documentation SSL Decryption Documentation

Read how to configure and utilize SSL Decryption to enhance your network security. Learn more


SSL Decryption Discussions

Have questions about SSL Decryption? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
Feb 5, 2018 1:13:48 AM

SSL decryption alert or log

Hi We use SSL decryption and from time to time we have issue with web sites and apps not working because we are decrypting their traffic. If...

71 5
Dec 18, 2017 4:17:45 AM

Disabling SSL Decryption not working

Hey everybody!After watching all tutorials and reading all PAN's walkthroughts, I still fail to disable the SSL Inspection (decryption) on all of the ...

41 3
Jan 16, 2018 10:02:31 AM

Troubleshooting SSL decryption failure of a website

Hello. We are using panOS 8.0.7 , Pan-DB URL filtering, and SSL decryption. We are K12 education and use many Chromebooks in the organizatio...

83 10
Feb 9, 2017 5:58:57 AM

SSL Decryption - Enterprise CA

Hi Everyone, Recently a decision was made to implement SSL Decryption for outbound inspection.  We work within a Microsoft PKI environment a...

208 2
Mar 24, 2016 6:35:22 AM

SSL Decryption

Hello   We have recentley tuned on SSL Decryption for some users. Since then we are getting some SSL sites that cannot be accessed due to cypher ...

146 2

SSL Decryption Articles

Latest Articles

SSL decryption resource list

4 likes 65925 views Jan 6, 2016 11:26:30 AM by in Management Articles

  Overview SSL decryption gives the Palo Alto Networks firewall the ability to see inside of secure HTTP traffic that would otherwise be hidden. SSL decryption can be used to monitor for any signs that a company's valuable in...

How to Configure SSL Decryption

9 likes 4 comments 109487 views Sep 24, 2015 11:40:30 AM by in Tutorials

Video Tutorial: How to Configure SSL Decryption     This video is designed to help you understand and configure SSL Decryption on PAN-OS 6.1.   We’ll be covering the following topics:   What is SSL Decryption?...

Decrypted SSL Session Marked as Application SSL

3 likes 10282 views Jun 28, 2016 1:15:01 AM by in Management Articles

Issue   We know that SSL decryption is supposed to give us visibility of traffic that would otherwise be encrypted. Therefore, we'd expect decrypted traffic to be identified as the underlying applications, such as web-browsin...

Decrypt errors on SSL inbound inspection after upgrading to 8.0

1144 views Feb 8, 2018 5:18:57 AM by in Management Articles

Issue: SSL inbound policies worked ok when configured on 7.1 but after upgrading to 8.0, the sessions would fail and the logs show decrypt errors. This is seen when the server uses a certificate with an intermediate certificate in...

Controlling SSL Decryption

17 comments 34419 views Dec 15, 2011 3:09:45 PM by in Tech Note Articles

This article is currently out of date and all content has been removed. For a newer article that describes the same information in better detail, please see: How to Implement and Test SSL Decryption   See also SSL decryption ...