Focus

PAN-OS Web Interface Reference

Objects > Decryption Profile

Table of Contents

Objects > Decryption Profile

Decryption profiles enable you to block and control specific aspects of SSL and SSH traffic that you have specified for decryption, as well as traffic that you have explicitly excluded from decryption. After you create a decryption profile, you can then add that profile to a decryption policy; any traffic matched to the decryption policy is additionally enforced based on the profile settings.

A default decryption profile is configured on the firewall, and is automatically included in new decryption policies (you cannot modify the default decryption profile). Click Add to create a new decryption profile, or select an existing profile to Clone or modify it.

What are you looking for?	See:
Add a new decryption profile. Enable port mirroring for decrypted traffic.	Decryption Profile General Settings
Block and control SSL decrypted traffic.	Settings to Control Decrypted SSL Traffic
Block and control traffic that you have excluded from decryption (for example, traffic classified as health and medicine or financial services).	Settings to Control Traffic that is not Decrypted
Block and control decrypted SSH traffic.	Settings to Control Decrypted SSH Traffic

Objects > Authentication

Decryption Profile General Settings