To use the Decryption Port Mirror feature, you must select the
Decrypt
Mirror
interface type. This feature enables creating
a copy of decrypted traffic from a firewall and sending it to a
traffic collection tool that can receive raw packet captures—such
as NetWitness or Solera—for archiving and analysis. Organizations that
require comprehensive data capture for forensic and historical purposes
or data leak prevention (DLP) functionality require this feature.
To enable the feature, you must acquire and install the free license.
