Activate the free license required to get started with
Decryption Port Mirroring.
Decrypting SSH traffic and SSL traffic (SSL internet traffic or SSL traffic to an internal server) does
not require a license. However, you must activate a free license
in order to enable Decryption
Mirroring. The free license requirement ensures that this
feature can only be used after the approved personnel purposefully
activates the associated license.
In PAN-OS 10.1, the
Decryption Broker feature and free license were replaced with Network
Packet Broker (see the Networking Administrator’s Guide),
which expands the broker’s capabilities to non-decrypted TLS traffic
and non-TLS traffic in addition to decrypted TLS traffic. Network Packet Broker licenses are
also free to download and install from the Customer Support Portal.
Follow
these steps on the Palo Alto Networks Customer Support Portal to
activate a decryption mirroring feature license.