Decryption
You can’t protect yourself against threats you can’t
see. Decrypt traffic to reveal encrypted threats so the firewall
can protect your network against them.
Palo Alto Networks firewalls can decrypt and inspect
traffic to provide visibility into threats and to control protocols,
certificate verification, and failure handling. Decryption can enforce
policies on encrypted traffic so that the firewall handles encrypted
traffic according to your configured security settings. Decrypt
traffic to prevent malicious encrypted content from entering your
network and sensitive content from leaving your network concealed
as encrypted traffic. Enabling decryption can include preparing
the keys and certificates required for decryption, creating decryption
profiles and policies, and configuring decryption port mirroring.