You are here
SEC0315 - PAN 9.0 SSL Decryption (Part 1)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
Video Download:
Title: SEC0315 - Video Download $20.00
The video looks at various aspects around traffic decryption on Palo Alto Firewall. We will be focusing on two commonly-used SSL decryption features namely SSL Forward Proxy and SSL Inbound Inspection to inspect user outbound internet, and inbound to our public-facing server. We will look at a way to prevent FW evasion with SSH tunneling using SSH Proxy. The lab finishes with a discussion around QUIC protocol.
Part 1 of this video covers SSL Forward Proxy
Topic:
-
SSL Forward Proxy
- Trusted Certificate
- Untrusted Certificate
- SSL Decrypt Opt-out
-
SSL Inbound Inspection
- Certificate/Key Import
- Decryption Profile
- Decryption Policy
- SSH Proxy
- Quic
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.