This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
SSL Decryption
Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author Topic Views Replies
Star_Man
Star_Man
11-28-2025

Whatsapp (IOS) Traffic not recognized in PaloAlto Firewall

Hi Everyone, We are currently experiencing an issue where WhatsApp on iOS devices is unable to connect, while Android devices and laptops work witho... — Read more

posted in General Topics

411 2
tn001140351
tn001140351
11-27-2025

Not able to log XFF (Actual Client IP) in PaloAlto Logs even when we enable XFF and URL filtering profile in Palo's

Issue Summary – XFF Not Logged on Palo Alto (Even With Decryption ON) We are running a flow where AWS ALB inserts X-Forwarded-For (XFF) and the Palo A... — Read more

posted in Next-Generation Firewall Discussions

299 1
Alpalo
Alpalo
11-30-2025

AnyDesk application is not recognised in Palo Alto version 10.2.17

Hello, team: The AnyDesk application is not recognised in Palo Alto version 10.2.17; it is classified as SSL and I cannot block it. Does anyone know i... — Read more

posted in General Topics

291 2
HungTrinh
HungTrinh
11-22-2025

High Data Plane Utilization During Business Hours

Hello, We are experiencing an issue that is becoming hard to isolate, our end users noticed network slowness about a few days ago. During Isolatio... — Read more

posted in Next-Generation Firewall Discussions

274 1
V.Sambath
V.Sambath
11-27-2025

Trendmicro application identified as "ssl" despite of proper SNI, CN, SAN.

We have the Trend Micro agent installed on the endpoints, and it is running smoothly. However, the application is still being identified as "ssl", ev... — Read more

posted in General Topics

519 4
Join now

Blogs

Supercharge Your Web Security: Announcing PA-5450 Support for Web Proxy

11-18-2025 — We're excited to announce full Web Proxy support on the high-performance PA-5450 Next-Generation Firewall with PAN-OS 12.1.2 (Orion). This allows you to consolidate your security stack, leveraging the PA-5450’s power for full SSL decryption, Advan... — Read more

Labels: Advanced Threat Prevention App-ID Data Loss Prevention DLP Next-Generation Firewall NGFW Orion PA-5450 PAN-OS 12.1.2 Security Consolidation SSL Decryption User-ID Web Proxy
592 by in Community Blogs

DOTW: What Are Cipher Suites?

01-06-2022 — Find out what are cipher suites and which ones are supported for the different features on your device in this Discussion of the Week. Find out what are cipher suites and which ones are supported for the different features on your device in this D... — Read more

Labels: Administration Decryption How to SSL SSL Decryption TLS
7093 3 by in Community Blogs

The Increasing Necessity for SSL Decryption

07-07-2021 — From performance abilities to new hardware, SSL Decryption capabilities have been greatly improved. — Read more

Labels: NGFW SSL Decryption
10251 6 by in Community Blogs

More on SSL Decryption

08-07-2020 — Read how SSL Decryption gives the ability to view inside of Secure HTTP traffic (SSL) as it passes through the Palo Alto Networks firewall. — Read more

Labels: NGFW Configuration PAN-OS SSL Decryption SSL Forward Proxy
23979 3 8 by in Community Blogs

HTTP/2 Inspection

07-09-2020 — Starting with PAN-OS 9.0.0, HTTP/2 inspection is supported on Palo Alto Networks firewalls. Learn more here! — Read more

Labels: Decryption HTTP NGFW Configuration PAN-OS PAN-OS 9.0 SSL Decryption
21948 2 9 by in Community Blogs

View All

Articles

Tips & Tricks: SSL Forward Proxy

05-22-2023 — In today's digital world, where encryption is all around us, SSL decryption becomes a real superhero in the fight against hidden threats and bolstering network security. Luckily, Palo Alto Networks Next-Generation Firewall comes to the rescue with... — Read more

Labels: Network Security Next-Generation Firewall SSL Decryption
9863 4 2 by in General Articles

Nominated Discussion: URL Filtering in TLS v1.3

02-28-2023 — — Read more

Labels: Advanced URL Filtering NGFW NGFW Configuration SSL SSL Decryption TLS
8190 1 2 by in General Articles

Best Practices for SSL Decryption with Prisma Access

01-13-2022 — Understand how SSL Decryption with Prisma Access can increase your visibility into network traffic and reduce security threats — Read more

Labels: best practices Prisma Access SSL Decryption SSL Forward Proxy
10750 by in Prisma Access Webinars

SSL Decryption with Prisma Access

09-13-2021 — Gain visibility and control over network traffic through SSL Decryption with Prisma Access — Read more

Labels: Prisma Access SSL Decryption
7221 by in Prisma Access Webinars

View All

Videos

Digital Learning Courses

Access Palo Alto Networks learning platform to gain free technical insights and educational materials across our full suite of products.

Please note: SSO login is necessary to access the content.

LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks