Vwire and L3 Deployment Decryption

[Sanssj]

Hi,
I would like to know the way it operates in the backend how palo alto does the SSL decryption in Vwire mode . As in a L3 deployment the connection will terminate on the firewall and firewall acts like a MITM and does the SSL Proxying. How is the case in Vwire Deployment.

Thanks

[reaper]

Hi @Sanssj

The same way a transparent proxy works

the firewall receives a packet, puts it through the decrypt proxy and puts it back on the wire with spoofed source mac