how can I know that traffic is hitting a configured decryption policy ?

[AKamal]

SSL decryption Policy question, how can I know that traffic is hitting a configured decryption policy ?

There's nothing in the Monitor Tab for decryption policies, nor can I get anything out of the CLI command "show log traffic rule equal DECRYPTION-RULE-NAME" ,

any ideas ?

[panos]

Do you have many decryption rules ?

if traffic hits a rule and is decrypted you can see it from monitor/traffic log inside magnifier

[VinceM]

HI,

First match your decrytion policies, second, on a traffic log, you can click on small icon on the left and check if your session have been decrypted

Rgds

[sraghunandan]

This cli command would help too

> show session all filter ssl-decrypt yes (under flag if you see an asterix that means the session is getting decrypted)

[AKamal]

Thank you everyone for investing your time and effort in replying to my question
And thank you sraghunandan for the tip on the cli command