| Encryption can be a double edged sword, protecting legitimate traffic on one hand, while hiding illicit activity on the other. Using policy-based decryption and inspection, administrators can ensure that SSL and SSH are being used for business purposes as opposed to propagation of threats or unauthorized data transfer. |
| |
| |
| Identify, control and inspect outbound SSL traffic. |
| Policy based identification, decryption, and inspection of inbound SSL traffic (from outside clients to internal servers) can be applied as a means of ensuring that applications and threats are not hiding within SSL traffic. Server certificate and private key are installed on the Palo Alto Networks next-generation firewall to achieve the decryption. By default, SSL decryption is disabled. |
| |
| Identify, control and inspect inbound SSL traffic. |
| Policy-based identification, decryption and inspection of outbound SSL traffic (from users to the web) can be applied as a means of ensuring that applications and threats are not hiding within SSL traffic. A man-in-the-middle approach is used where device certificates are installed in the user's browser. By default, SSL decryption is disabled. |
| |
| Identify and control SSH traffic. |
| Administrators can perform policy-based identification and control of SSH tunneled traffic. A man-in-the-middle approach is used to detect port forwarding or X11 forwarding within SSH as an ssh-tunnel, while regular shell or scp and sftp access to the remote machine is reported as ssh. By default, SSH decryption is disabled. |
| |
| Learn More |
| |
| |
