End-of-Life (EoL)

Temporarily Disable SSL Decryption

In some cases you may want to temporarily disable SSL decryption. For example, if your users are having problems accessing an encrypted site or application, you may want to disable SSL decryption in order to troubleshoot the issue. Although you could disable the associated decryption policies, modifying the policies is a configuration change that requires a Commit. Instead, use the following command to temporarily disable SSL decryption and then re-enable it after you finish troubleshooting. This command does not require a commit and it does not persist in your configuration after a reboot.
Temporarily Disable SSL Decryption
  • Disable SSL Decryption
    set system setting ssl-decrypt skip-ssl-decrypt yes
  • Re-enable SSL Decryption
    set system setting ssl-decrypt skip-ssl-decrypt no

Recommended For You