SSL Decryption

Buy or Renew

SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
P.Kumar089697 04-29-2026	Existing traffic stops suddenly, and changing of interface MTU resolved it. Hi Community, I have query related to the current issue. I need to dig it more and want to know about the behavior of issue.Issue: one of the public w... — Read more posted in General Topics	380	2
M.Sullivan271926 04-21-2026	Foward Trust Cert and MacBook Pro I have a problem with my PAN generated FTC when used by MacBook Pro. My PANOS is 11.2.10-h3 and the test MBP is Sonoma 14.8.4. The FTC is loaded on t... — Read more posted in General Topics	1027	3
P.RuizLopez 04-13-2026	NGFW unable to fetch device certificate due to bug Hi Team,In reference to PAN-313623 describes an issue on Palo Alto Networks firewalls with Trusted Platform Module (TPM), support where device certifi... — Read more posted in Next-Generation Firewall Discussions	269	0
joe.jorgensen 04-08-2026	Restrict access via GlobalProtect to permit access to only a specific Google Drive Account/Folder I’m looking to enable access via GlobalProtect to a specific Google Drive account/folder, rather than granting access to all of Google Drive. I’ve enc... — Read more posted in GlobalProtect Discussions	307	1
itassetbenilde 04-07-2026	Decryption policies and Short-Lived Certificates Hi All, So basically, certificate validity will be shortened gradually until it is down to 47 days. The prospect of importing and reconfiguring our ... — Read more posted in Next-Generation Firewall Discussions	258	2

Blogs

Supercharge Your Web Security: Announcing PA-5450 Support for Web Proxy

11-18-2025 — We're excited to announce full Web Proxy support on the high-performance PA-5450 Next-Generation Firewall with PAN-OS 12.1.2 (Orion). This allows you to consolidate your security stack, leveraging the PA-5450’s power for full SSL decryption, Advan... — Read more

Labels: Advanced Threat Prevention App-ID Data Loss Prevention DLP Next-Generation Firewall NGFW Orion PA-5450 PAN-OS 12.1.2 Security Consolidation SSL Decryption User-ID Web Proxy
2830 by vekrishnan in Community Blogs

DOTW: What Are Cipher Suites?

01-06-2022 — Find out what are cipher suites and which ones are supported for the different features on your device in this Discussion of the Week. Find out what are cipher suites and which ones are supported for the different features on your device in this D... — Read more

Labels: Administration Decryption How to SSL SSL Decryption TLS
10426 3 by kiwi in Community Blogs

The Increasing Necessity for SSL Decryption

07-07-2021 — From performance abilities to new hardware, SSL Decryption capabilities have been greatly improved. — Read more

Labels: NGFW SSL Decryption
14263 6 by jdelio in Community Blogs

More on SSL Decryption

08-07-2020 — Read how SSL Decryption gives the ability to view inside of Secure HTTP traffic (SSL) as it passes through the Palo Alto Networks firewall. — Read more

Labels: NGFW Configuration PAN-OS SSL Decryption SSL Forward Proxy
27915 3 8 by jdelio in Community Blogs

HTTP/2 Inspection

07-09-2020 — Starting with PAN-OS 9.0.0, HTTP/2 inspection is supported on Palo Alto Networks firewalls. Learn more here! — Read more

Labels: Decryption HTTP NGFW Configuration PAN-OS PAN-OS 9.0 SSL Decryption
26647 2 9 by kiwi in Community Blogs

Articles

Tips & Tricks: SSL Forward Proxy

05-22-2023 — In today's digital world, where encryption is all around us, SSL decryption becomes a real superhero in the fight against hidden threats and bolstering network security. Luckily, Palo Alto Networks Next-Generation Firewall comes to the rescue with... — Read more

Labels: Network Security Next-Generation Firewall SSL Decryption
14032 4 2 by JayGolf in General Articles

Resources

Videos

Digital Learning Courses

Access Palo Alto Networks learning platform to gain free technical insights and educational materials across our full suite of products.

Please note: SSO login is necessary to access the content.

Decryption Features