SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

SSL Decryption Resources

Palo Alto Networks Delivers

SSL Decryption Information SSL Decryption Info SSL Decryption Information

Discover the numerous benefits of SSL Decryption for your network environment. Learn more

SSL Decryption Technical Documentation SSL Decryption Technical Documentation SSL Decryption Documentation

Read how to configure and utilize SSL Decryption to enhance your network security. Learn more


SSL Decryption Discussions

Have questions about SSL Decryption? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
Dec 18, 2017 4:17:45 AM

Disabling SSL Decryption not working

Hey everybody!After watching all tutorials and reading all PAN's walkthroughts, I still fail to disable the SSL Inspection (decryption) on all of the ...

35 3

Troubleshooting SSL decryption failure of a website

Hello. We are using panOS 8.0.7 , Pan-DB URL filtering, and SSL decryption. We are K12 education and use many Chromebooks in the organizatio...

62 10
Feb 9, 2017 5:58:57 AM

SSL Decryption - Enterprise CA

Hi Everyone, Recently a decision was made to implement SSL Decryption for outbound inspection.  We work within a Microsoft PKI environment a...

190 2
Nov 15, 2017 10:46:15 AM

SSL Website won't load with decryption enabled

Hello. One of my users was trying to go to: We have SSL forward proxy enabled.  If I exclude ...

67 3
Mar 24, 2016 6:35:22 AM

SSL Decryption

Hello   We have recentley tuned on SSL Decryption for some users. Since then we are getting some SSL sites that cannot be accessed due to cypher ...

135 2

SSL Decryption Articles

Latest Articles

SSL decryption resource list

4 likes 62557 views Jan 6, 2016 11:26:30 AM by in Management Articles

  Overview SSL decryption gives the Palo Alto Networks firewall the ability to see inside of secure HTTP traffic that would otherwise be hidden. SSL decryption can be used to monitor for any signs that a company's valuable in...

How to Configure SSL Decryption

8 likes 4 comments 104919 views Sep 24, 2015 11:40:30 AM by in Tutorials

Video Tutorial: How to Configure SSL Decryption     This video is designed to help you understand and configure SSL Decryption on PAN-OS 6.1.   We’ll be covering the following topics:   What is SSL Decryption?...

Decrypted SSL Session Marked as Application SSL

3 likes 9121 views Jun 28, 2016 1:15:01 AM by in Management Articles

Issue   We know that SSL decryption is supposed to give us visibility of traffic that would otherwise be encrypted. Therefore, we'd expect decrypted traffic to be identified as the underlying applications, such as web-browsin...

Controlling SSL Decryption

17 comments 33062 views Dec 15, 2011 3:09:45 PM by in Tech Note Articles

This article is currently out of date and all content has been removed. For a newer article that describes the same information in better detail, please see: How to Implement and Test SSL Decryption   See also SSL decryption ...

How to Implement and Test SSL Decryption

4 likes 60 comments 615518 views Apr 17, 2010 3:39:47 PM by in Configuration Articles

Overview PAN-OS can decrypt and inspect inbound and outbound SSL connections going through the Palo Alto Networks firewall. SSL decryption can occur on interfaces in virtual wire, Layer 2 or Layer 3 mode by using the SSL rulebase ...