You can't defend against threats you can't see. By enabling decryption on your next-gen firewalls you can inspect and control SSL/TLS and SSH traffic so that you can detect and prevent threats that would otherwise remain hidden in encrypted traffic. Use the best practice guidelines in this site to learn how to plan for and deploy decryption in your organization.
What Do You Want To Do?
Best Practice Decryption Profile: Data Center
Decryption Profiles define the SSL Protocol settings the firewall accepts so you can protect against vulnerable, weak protocols and algorithms.
Prepare to Deploy Decryption
Size the Firewall Decryption Deployment