You can’t protect yourself against threats you can’t
see. Decrypt traffic to reveal encrypted threats so the firewall
can protect your network against them.
Palo Alto Networks firewalls can decrypt and inspect
traffic to provide visibility into threats and to control protocols,
certificate verification, and failure handling. Decryption can enforce
policies on encrypted traffic so that the firewall handles encrypted
traffic according to your configured security settings. Decrypt traffic
to prevent malicious encrypted content from entering your network
and sensitive content from leaving your network concealed as encrypted
traffic. Enabling decryption can include preparing the keys and
certificates required for decryption, creating decryption profiles
and policies, and configuring decryption port mirroring.