SSL Decryption
Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

SSL Decryption

Traffic that has been encrypted using the protocols SSL and SSH can be decrypted to ensure that these protocols are being used for the intended purposes only, and not to conceal unwanted activity or malicious content.

Palo Alto Networks firewalls decrypt encrypted traffic by using keys to transform strings (passwords and shared secrets) from ciphertext to plaintext (decryption) and from plaintext back to ciphertext (re-encrypting traffic as it exits the device).

Discussions

Author Topic Views Replies
RockBD
03-17-2025

Use of SSL Decryption.

Dear AllI hope you all are doing well.We recently deployed a firewall with SSL decryption features. Previously, we used F5 WAF for SSL decryption.Shou... — Read more

posted in Next-Generation Firewall Discussions

156 1
rshetye
03-17-2025

UserID mapping flags user unknown with single digit timeout secs

Hi all, I'm using Agentless UserID mapping. Since past 2 weeks, random users are dropped out of ip-user-mapping and unable to browse internet. Wh... — Read more

posted in Next-Generation Firewall Discussions

157 1
SGCHOI
03-06-2025

Strata Cloud Manage - GlobalProtect Connection Error

Hello, Live community.This time, I deployed GlobalProtect SSL VPN in Strata Cloud Manage with SASE.The current issue is as follows. The cover photo I ... — Read more

posted in Strata Cloud Manager

165 0
PS007
03-03-2025

How to trigger a "Response page" on Palo Alto NGFWs using URL filtering & Decryption

Hi All, I want to share my experience on very latest configuration I did in my company Firewall infra. With the genAI evolution & most of the com... — Read more

posted in Next-Generation Firewall Discussions

307 0
DanielS.Romero
03-03-2025

NGFW Global Protect 6.2.7 Global Counters Negotiation Error TLS 1.3 MAC-OS

Hello Livecommunity!I'm facing an error with the Global Protect Agent 6.2.7 when an Apple Mac OS X 15.3.1 Sequoia tries to establish an SSL VPN connec... — Read more

posted in GlobalProtect Discussions

299 0

Blogs

DOTW: What Are Cipher Suites?

01-06-2022 — Find out what are cipher suites and which ones are supported for the different features on your device in this Discussion of the Week. Find out what are cipher suites and which ones are supported for the different features on your device in this D... — Read more

Labels: Administration Decryption How to SSL SSL Decryption tls
6222 3 by in Community Blogs

The Increasing Necessity for SSL Decryption

07-07-2021 — From performance abilities to new hardware, SSL Decryption capabilities have been greatly improved. — Read more

Labels: ngfw SSL Decryption
8898 6 by in Community Blogs

More on SSL Decryption

08-07-2020 — Read how SSL Decryption gives the ability to view inside of Secure HTTP traffic (SSL) as it passes through the Palo Alto Networks firewall. — Read more

Labels: NGFW Configuration PAN-OS SSL Decryption SSL Forward Proxy
22139 3 8 by in Community Blogs

HTTP/2 Inspection

07-09-2020 — Starting with PAN-OS 9.0.0, HTTP/2 inspection is supported on Palo Alto Networks firewalls. Learn more here! — Read more

Labels: Decryption HTTP NGFW Configuration PAN-OS PAN-OS 9.0 SSL Decryption
19304 2 9 by in Community Blogs

AddTrust External CA Root Expired

06-05-2020 — AddTrust External CA Root expired on 30th of May, 2020. Find out how this can impact your traffic and how to fix this! — Read more

Labels: certificate Decryption SSL Decryption
9494 2 2 by in Community Blogs

Articles

Tips & Tricks: SSL Forward Proxy

05-22-2023 — In today's digital world, where encryption is all around us, SSL decryption becomes a real superhero in the fight against hidden threats and bolstering network security. Luckily, Palo Alto Networks Next-Generation Firewall comes to the rescue with... — Read more

Labels: network security Next-Generation Firewall SSL Decryption
8092 4 2 by in General Articles

Nominated Discussion: URL Filtering in TLS v1.3

02-28-2023 — — Read more

Labels: Advanced URL Filtering ngfw NGFW Configuration SSL SSL Decryption tls
7029 1 2 by in General Articles

Best Practices for SSL Decryption with Prisma Access

01-13-2022 — Understand how SSL Decryption with Prisma Access can increase your visibility into network traffic and reduce security threats — Read more

Labels: Best Practices prisma access SSL Decryption SSL Forward Proxy
9632 by in Prisma Access Webinars

SSL Decryption with Prisma Access

09-13-2021 — Gain visibility and control over network traffic through SSL Decryption with Prisma Access — Read more

Labels: prisma access SSL Decryption
6610 by in Prisma Access Webinars

Keeping Configuration Aligned to Best Practices

03-31-2021 — Configuration changes are always necessary in a network, whether they are for adding new applications, allowing access to users or to create exceptions in security profiles. Prisma Access Cloud Management provides the ability for administrators to make sure that the configuration is always aligne... — Read more

Labels: Prisma Access Cloud Management SSL Decryption
5880 by in Prisma Access Cloud Management Articles

Videos

Digital Learning Courses

Visit Palo Alto Networks' learning platform, Beacon, for free technical knowledge and educational resources related to all of our products.

Please note: You need to be logged into SSO in order to view this content.