To configure this properly, the administrator imports a copy of the protected server’s certificate and key. In the case of inbound SSL decryption, inbound traffic would be destined to an internal Web Server or device. Decrypted traffic is never sent off the device. Once traffic is decrypted, tunneled applications can be detected and controlled, and the decrypted data can be inspected for threats/URL filtering/file blocking/data filtering. In particular, decryption can be based upon URL categories as well as source user and source/target addresses. The Decryption rulebase is used to configure which traffic to decrypt.
SSL decryption can occur on interfaces in virtual wire, Layer 2 or Layer 3 mode. PAN-OS can decrypt and inspect SSL inbound and outbound connections going through the firewall. SSL certificates have a key pair: public and private, which work together to establish a connection. SSL (Secure Sockets Layer) is a security protocol that encrypts data to help keep information secure while on the internet. Committing Changes and Testing Decryption.Enabling SSL Decryption Notification Page (optional).Ensuring the Proper Certificate Authority on the Firewall.
