SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

SSL Decryption Resources

Palo Alto Networks Delivers

SSL Decryption Information SSL Decryption Info SSL Decryption Information

Discover the numerous benefits of SSL Decryption for your network environment. Learn more

SSL Decryption Technical Documentation SSL Decryption Technical Documentation SSL Decryption Documentation

Read how to configure and utilize SSL Decryption to enhance your network security. Learn more


SSL Decryption Discussions

Have questions about SSL Decryption? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
Sep 27, 2018 10:40:11 AM

SSL decryption troubleshooting - decrypt-cert-validation

I have been working with SSL decryption over 4 month on testing team. Most of the traffic is OK but I see some of the traffic are being Aged-Out ...

106 5
Oct 12, 2018 1:57:04 PM

ssl decryption and policy deny

 I have configured ssl decryption and rule is there to allow the traffic IT is hitting the right rule but policy says denied?  wha...

57 5
Sep 18, 2018 6:42:32 AM

SSL Decryption just some users

Hello everybody, I'm struggling thinking how i can do this. I've implemented SSL Decryption in the Palo Alto FW and i just tried with two IP's&nb...

66 8
Mar 24, 2016 6:35:22 AM

SSL Decryption

Hello   We have recentley tuned on SSL Decryption for some users. Since then we are getting some SSL sites that cannot be accessed due to cypher ...

175 2
Nov 20, 2015 6:48:15 AM

SSL Decryption

With SSL Decryption it is recomended that Financial services & Medical category is not decrypted. My question is how do you ensure that sites that...

132 2