Configure Decryption Logging (Strata Cloud Manager)

1. Log in to Strata Cloud Manager.
2. Create or modify a decryption policy rule to specify which traffic to log.
3. Configure Log Settings in the decryption policy rule.

   1. For Logging, select Log Successful TLS handshakes.

      By default, Strata Cloud Manager logs unsuccessful handshakes.

      Log successful handshakes as well as unsuccessful handshakes to gain visibility into as much decrypted traffic as your device’s available resources permit (don’t decrypt private or sensitive traffic; follow decryption best practices and decrypt as much traffic as you can).
   2. (Optional) Forward decryption logs to Dedicated Log Collectors, other storage devices, or specific administrators.

      If you forward decryption logs, be sure that the logs are stored securely as they contain sensitive information.

      1. Create a Log Forwarding profile to specify the decryption Log Type and the method of forwarding the logs.
      2. For External Log Forwarding, select the profile you created.
4. Save your rule.
5. Commit your changes.

   Select Push ConfigPush.