Anyone doing SSL Decryption for Firewall Application Filtering? We are replacing our firewall right now. Currently evaluating a Palo Alto 3020 and the new Cisco Sourcefire stuff. Decrypt - Known Certificate 1. In the FireSIGHT Management Center, navigate to Analysis Connections Events. Depending upon your workflow, you may or may not see the SSL decrypt option. Click Table View of Connection Events. Scroll to the right and look for the SSL Status. Sourcefire Virtual FirePOWER appliances provide the capability to inspect VM-to-VM communications, providing the same control and protection as their physical counterparts. REMOVE NETWORk bLIND SPOTS THROUGH SSL DECRYPTION The use of SSL encryption is exploding due to cloud computing and the rise of Web-enabled applications.

The implementation of Secure Socket Layer (SSL) decryption and encryption has become very common in the enterprise environment nowadays. SSL certificates provide a secure channel between the browser of the end-user and the destination (web)server. Most of the time, the decryption technique is therefore based on the interception of the communication between the two systems. The Firepower SSL Decryption feature allows you to block encrypted traffic without inspection or inspect encrypted that would otherwise be unable to be inspected. In order for the FTD to decrypt the traffic the FTD must resign all certificates of websites, this is achieved by a Man in the Middle (MITM) attack.

Question
What is SSL Decryption?
Environment
PAN-OS
Next Generation Firewall
Answer

Gigamon Ssl Decryption

SSL Decryption is the ability to view inside of Secure HTTP traffic (SSL) as it passes through the Palo Alto Networks firewall:

• Without SSL Decryption: A firewall admin has no access to the information inside of an encrypted SSL packet, masking all of the activity
• With SSL Decryption: If the data is sourced from within the network, there will be visibility into the SSL packet to find hidden applications and threats inside SSL traffic

Sourcefire Ssl Decryption Download

Additional Information
Looking for a deeper dive? Please read White Paper - Decryption: Why, Where, and How
For a list of valuable resources on understanding and configuring SSL Decryption, see SSL Decryption Resource List on Configuring and Troubleshooting
For implementing and testing SSL Decryption, see How to Implement and Test SSL Decryption
Additional information about SSL Decryption and Best Practices: Decryption Best Practices
For additional information on new SSL Decryption features, please review this blog on LIVEcommunity.