SSL Decryption

SSL Decryption

1. Its purpose is to apply security enforcement to the encrypted traffic

2. 3 Types

   • SSL forward proxy
     • Control Outbound traffic
       • The Firewall analyzes the server certificate. If it is signed by a trusted CA (Certificate Authority) to the Firewall and meets policies and profiles (allowed) it generates an SSL Forward Trust copy of the server certificate and sends it to the client.
     • Decryption profile
       • To apply security enforcement based on the server cert status (valid, SNI matching SAN), supported versions, cipher suites, etc.
     • Decryption Policy
       • a rule that determines which traffic must be encrypted by the Firewall. Map a decryption profile here
   • SSL Inbound Inpection
     • The Firewall must have a certificate and private key for each server.
   • SSH Proxy