on Palo Alto Certificate create

[kuveytturk]

We create a certificate on our local CA. We want to decrypt traffic in Palo Alto using this certificate. We decided to use the CN as "*" to match all destination hostnames the client will use. We installed the certificate and the intermediate and root certificates on Palo Alto but we could not be able to decrypt the traffic via this certificate. Could you help us to decrypt the traffic and to understand whether it is successfull or not?

[mikand]

You create a new CA to be used for this purpose.

The CA public and private cert is then imported to the PAN so it can create the MITM certs on the fly to perform the SSL-termination/inspection.

The CA public cert is then imported to the client as a trusted issuer.

The CN used for the CA is the line your browser will display when you click on the lock (in the browser) and it says "This site has been verified by XXX".