Decryption Profile ----No decryption

[MP18]

i am using default  decryption profile.

Under tab  no decryption i see below

block sessions with expired certs

need to understand when does this setting is used when i am doing the ssl decryption or not doing ssl decryption?

 also does it only apply to ssl decryption policy ?

[reaper · Accepted solution]

hi @MP18

This applies when traffic hits an ssl decryption policy with the action set to no-decrypt

This means you won't decrypt the traffic but you'll still verify the certificate

[MP18]

When you say it will verify the certificate  which cert you are referring here?

[Remo · Accepted solution]

@MP18

This setting is to verify the cert of the server where the connection is going to.

[MP18]

Many Thanks.