SSL decryption

[DendreT]

How would one  implement a man in the middle SSL decryption configuration on the Palo Alto without the client's browser popping up with a untrusted cert message?

[sraghunandan]

If your using a self signed certificate please export the certificate by navigating to Device-Certificates-check and certificate-export it either using pem or pksc12  and import it in the browser using the following link

https://live.paloaltonetworks.com/docs/DOC-3599

[_slv_]

Hi

You must install on clinet computers your cert (I guess that you have self generatet cert installed)

Please read SSL Decryption Certificates and also How to Implement SSL Decryption  could be helpfull

this also my be helpfull Controlling SSL Decryption

regards

Slawek