Configure SSL decryption in a policy group by selecting NGFW, enabling Additional Settings, and choosing a TLS/SSL decryption profile. This task maps the decryption policy to target devices and saves the configuration.
Configure SSL decryption in a security policy within a policy group by using NGFW settings and a TLS/SSL decryption profile.
Use this task to configure SSL decryption within the policy group framework.
SSL decryption is managed via the Next-Generation (NG) Firewall settings within the Policy Group.
Before you begin
Create a TLS/SSL decryption profile. For more information, see TLS/SSL Decryption in Configure a Security Policy Using a Policy Group.
Follow these steps to create a security policy for SSL decryption using policy groups.
Procedure
-
From the SD-WAN Manager menu, choose , and then select NGFW.
-
Click Additional Settings to configure additional NGFW settings for a security policy.
-
Enter the required details. For more information, see Configure NGFW Additional Settings.
-
Choose the TLS/SSL decryption profile from the drop-down list.
-
Click Save.
The SSL decryption policy is successfully configured and mapped to the target devices within the policy group.