If I enable SSL decryption and the PAN effectively works as a "man-in-the middle", the client recieves a cert error saying the certificate has not been generated by the destination server. No problem, as I can add the PAN cert as a trusted cert in my organisation. However, how does the PAN protect from recieving a spoofed cert from the destination server? If the PAN wasn't in place, my WIndows client would tell me the cert doesn't match. Does the PAN run any such tests and if so, how does it inform me? Regards Neil
... View more