Disable SSL decryption via CLI - how long

[MP18]

Happy New Year everyone

Need to know if i run the below command

Disable SSL Decryption

set system setting ssl-decrypt skip-ssl-decrypt yes

Will this disable ssl decryption for 1 hour or 1 day need to know for how long?

[gwesson · Accepted solution]

It's permanent, but does not survive a reboot:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/temporarily-disable-ssl-decrypt...

Once you reboot the firewall, the setting is gone. Also, it's not part of the config so it won't show up in your running-config.xml file.

[gwesson · Accepted solution]

It's permanent, but does not survive a reboot:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/temporarily-disable-ssl-decrypt...

Once you reboot the firewall, the setting is gone. Also, it's not part of the config so it won't show up in your running-config.xml file.

[MP18]

Many thanks for confirming that.