Can the VM Firewall decrypt, inspect, and re-encrypt SSH traffic?

[JimmyChernega]

We have to use SFTP, which uses SSH, for some AWS transfers.  We wish to do deep packet inspection.  Can the PA VM-FW accomplish that?  Thanks.

[TomYoung · Accepted solution]

Hi @JimmyChernega ,

On this URL -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-concepts/ssh-proxy, scroll down to the bottom, last sentence under #7.  "The firewall only looks for SSH port forwarding, it does not perform content and threat inspection on SSH tunnels."  It only blocks the ssh-tunnel app.

Thanks,

Tom