SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

SSL Decryption Resources

Palo Alto Networks Delivers

SSL Decryption Information SSL Decryption Info SSL Decryption Information

Discover the numerous benefits of SSL Decryption for your network environment. Learn more

SSL Decryption Technical Documentation SSL Decryption Technical Documentation SSL Decryption Documentation

Read how to configure and utilize SSL Decryption to enhance your network security. Learn more


SSL Decryption Discussions

Have questions about SSL Decryption? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
Feb 5, 2018 1:13:48 AM

SSL decryption alert or log

Hi We use SSL decryption and from time to time we have issue with web sites and apps not working because we are decrypting their traffic. If...

126 5
Mar 24, 2016 6:35:22 AM

SSL Decryption

Hello   We have recentley tuned on SSL Decryption for some users. Since then we are getting some SSL sites that cannot be accessed due to cypher ...

157 2
May 4, 2018 8:13:37 AM

SSL Decryption - Enterprise CA

Hi Everyone, Recently a decision was made to implement SSL Decryption for outbound inspection.  We work within a Microsoft PKI environment a...

255 4
Feb 7, 2017 6:03:22 AM

SSL Decryption issue (wrong certificate)

Hi All, Having SSL Decryption issue with one of the websites at the moment ( testing without decryption and ch...

278 13
May 4, 2018 8:58:02 AM

SSL decryption issue for Windows Store

Hello, After enabling SSL Decryption, we cannot download from Windows store. Getting error below.Tried excluding hostname with Microsoft but no l...

56 1

SSL Decryption Articles

Latest Articles

SSL decryption resource list

5 likes 74864 views Jan 6, 2016 11:26:30 AM by in Management Articles

  Overview SSL decryption gives the Palo Alto Networks firewall the ability to see inside of secure HTTP traffic that would otherwise be hidden. SSL decryption can be used to monitor for any signs that a company's valuable in...

Troubleshooting SSL Decryption using Dynamic Address Groups

1 likes 1 comments 5134 views Mar 23, 2018 2:23:51 PM by in Learning Articles

Introduction This document will walk through an automation example using the Palo Alto Networks firewall and Dynamic Address Groups (DAGs). Using DAGs is a powerful way to bring automation to security policies. The idea is to have...

How to Configure SSL Decryption

9 likes 4 comments 121369 views Sep 24, 2015 11:40:30 AM by in Tutorials

Video Tutorial: How to Configure SSL Decryption     This video is designed to help you understand and configure SSL Decryption on PAN-OS 6.1.   We’ll be covering the following topics:   What is SSL Decryption?...

Decrypted SSL Session Marked as Application SSL

3 likes 14086 views Jun 28, 2016 1:15:01 AM by in Management Articles

Issue   We know that SSL decryption is supposed to give us visibility of traffic that would otherwise be encrypted. Therefore, we'd expect decrypted traffic to be identified as the underlying applications, such as web-browsin...

Decrypt errors on SSL inbound inspection after upgrading to 8.0

6102 views Feb 8, 2018 5:18:57 AM by in Management Articles

Issue: SSL inbound policies worked ok when configured on 7.1 but after upgrading to 8.0, the sessions would fail and the logs show decrypt errors. This is seen when the server uses a certificate with an intermediate certificate in...