Can the VM Firewall decrypt, inspect, and re-encrypt SSH traffic?

JimmyChernega · ‎08-08-2023

We have to use SFTP, which uses SSH, for some AWS transfers. We wish to do deep packet inspection. Can the PA VM-FW accomplish that? Thanks.

TomYoung · ‎08-08-2023

On this URL -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-concepts/ssh-proxy, scroll down to the bottom, last sentence under #7. "The firewall only looks for SSH port forwarding, it does not perform content and threat inspection on SSH tunnels." It only blocks the ssh-tunnel app.

Thanks,

Tom

Help the community: Like helpful comments and mark solutions.

TomYoung · ‎08-08-2023

On this URL -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-concepts/ssh-proxy, scroll down to the bottom, last sentence under #7. "The firewall only looks for SSH port forwarding, it does not perform content and threat inspection on SSH tunnels." It only blocks the ssh-tunnel app.

Thanks,

Tom

Help the community: Like helpful comments and mark solutions.