Inspect SSL/TLS Handshakes (

Strata Cloud Manager

)

Confirm that your
Prisma Access
license includes an Advanced URL Filtering subscription.
Select
Manage
Service Setup
Overview
and click on the hyperlinked Quantity value. Information including Security Services appears.
Under Security Services, confirm that a checkmark is next to URL Filtering.
Verify that you decrypt SSL/TLS traffic through either SSL Forward Proxy or SSL Inbound Inspection.
Enable inspection of SSL/TLS handshakes by CTD. By default, this option is disabled.
Select
Manage
Configuration
Security Services
Decryption
.
By Decryption Settings, select the settings icon. Then, select
Inspect TLS Handshake Messages
.
Alternatively, you can use the
set deviceconfig setting ssl-decrypt scan-handshake
<yes|no>
CLI command.
Save
your changes. Under Decryption Settings, the Inspect TLS handshake message setting should say Enabled.
Push Config
to save and commit your changes.