This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
SSL Decryption
Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author Topic Views Replies
TosYoshida
TosYoshida
02-20-2026

Prisma Access Explicit Proxy — Anti‑Spyware behavior when DNS bypasses Prisma (logging subtype + test methodology)

Attention: JAPAC TPM TeamHello Team, I have a question about the Anti-Spyware profile behavior in a Prisma Access (Explicit Proxy) environment. Sc... — Read more

posted in Prisma Access Discussions

114 0
Satyak
Satyak
02-18-2026

Unable to block download and upload for chatgpt and messengers

Hi Friends, Recently i am trying to acheive an requirement where i want to allow messenger and chatgpt in my network but files uploading and downloa... — Read more

posted in Next-Generation Firewall Discussions

51 0
Y.Narita347153
Y.Narita347153
01-29-2026

About UIA SSL connection

Hello Team, I'm currently dealing with an issue where UIA is unable to validate certification. The certificate does not have a SAN setting. I plan... — Read more

posted in Next-Generation Firewall Discussions

312 0
mohammedsalhis
mohammedsalhis
01-28-2026

Hotspot Shield VPN still works even though traffic logs show deny – Palo Alto Firewall

Dear Team , I’m facing an issue where Hotspot Shield VPN application is not being blocked, even though the Traffic Logs clearly show deny actions,... — Read more

1 posted in General Topics

1273 1
Juns_Net
Juns_Net
01-30-2026

gp Always disconnect

I've been using GP recently and it keeps disconnecting and reconnecting.I'm sure my network is working properly.I checked the pas log:(P1336-T19828)De... — Read more

posted in GlobalProtect Discussions

5346 4
Join now

Blogs

Supercharge Your Web Security: Announcing PA-5450 Support for Web Proxy

11-18-2025 — We're excited to announce full Web Proxy support on the high-performance PA-5450 Next-Generation Firewall with PAN-OS 12.1.2 (Orion). This allows you to consolidate your security stack, leveraging the PA-5450’s power for full SSL decryption, Advan... — Read more

Labels: Advanced Threat Prevention App-ID Data Loss Prevention DLP Next-Generation Firewall NGFW Orion PA-5450 PAN-OS 12.1.2 Security Consolidation SSL Decryption User-ID Web Proxy
1914 by in Community Blogs

DOTW: What Are Cipher Suites?

01-06-2022 — Find out what are cipher suites and which ones are supported for the different features on your device in this Discussion of the Week. Find out what are cipher suites and which ones are supported for the different features on your device in this D... — Read more

Labels: Administration Decryption How to SSL SSL Decryption TLS
9865 3 by in Community Blogs

The Increasing Necessity for SSL Decryption

07-07-2021 — From performance abilities to new hardware, SSL Decryption capabilities have been greatly improved. — Read more

Labels: NGFW SSL Decryption
13343 6 by in Community Blogs

More on SSL Decryption

08-07-2020 — Read how SSL Decryption gives the ability to view inside of Secure HTTP traffic (SSL) as it passes through the Palo Alto Networks firewall. — Read more

Labels: NGFW Configuration PAN-OS SSL Decryption SSL Forward Proxy
27109 3 8 by in Community Blogs

HTTP/2 Inspection

07-09-2020 — Starting with PAN-OS 9.0.0, HTTP/2 inspection is supported on Palo Alto Networks firewalls. Learn more here! — Read more

Labels: Decryption HTTP NGFW Configuration PAN-OS PAN-OS 9.0 SSL Decryption
25408 2 9 by in Community Blogs

View All

Articles

Tips & Tricks: SSL Forward Proxy

05-22-2023 — In today's digital world, where encryption is all around us, SSL decryption becomes a real superhero in the fight against hidden threats and bolstering network security. Luckily, Palo Alto Networks Next-Generation Firewall comes to the rescue with... — Read more

Labels: network security Next-Generation Firewall SSL Decryption
12988 4 2 by in General Articles

Nominated Discussion: URL Filtering in TLS v1.3

02-28-2023 — — Read more

Labels: Advanced URL Filtering NGFW NGFW Configuration SSL SSL Decryption TLS
10745 1 2 by in General Articles

Best Practices for SSL Decryption with Prisma Access

01-13-2022 — Understand how SSL Decryption with Prisma Access can increase your visibility into network traffic and reduce security threats — Read more

Labels: Best Practices Prisma Access SSL Decryption SSL Forward Proxy
13662 by in Prisma Access Webinars

SSL Decryption with Prisma Access

09-13-2021 — Gain visibility and control over network traffic through SSL Decryption with Prisma Access — Read more

Labels: Prisma Access SSL Decryption
9892 by in Prisma Access Webinars

View All

Videos

Digital Learning Courses

Access Palo Alto Networks learning platform to gain free technical insights and educational materials across our full suite of products.

Please note: SSO login is necessary to access the content.

LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks