Inbound SSL Decryption

[sgoethals]

Hi,

I have two questions for folks

1) I have setup Inbound SSL decryption as outlined in the documentation  (Import Server Certificate, Create Decryption Policy, Create Decryption Profile), and expected that when I looked at my traffic log to the server in question, I would see the decrypted flag set.  However, my entry doesn't list it. How should I be validating that my decryption policy is working?

2) If a web server is set up with HTTP redirect to HTTPS, and an incoming traffic comes into the firewall originally as HTTP, will a decryption policy still be applied, or does the redirect happen on the backend (server side) bypass the decryption policy in some way?

Thanks for any help.

[OtakarKlier]

Hello,

I usually test phone a system not internal to my network, i.e. laptop on hotspot, cell phone etc. If it redirects, it should still hit the decryption policy since it will change from web-browsing to ssl traffic. I would say double check your setup and on the cert make sure you imprted the private key as well.

Regards,