View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

SEC0315 - PAN 9.0 SSL Decryption (Part 2)

No votes yet
Difficulty Level: 
Lab Document: 
<Please login to see the content>
Video Download: 
Title: SEC0315 - Video Download $20.00
Purchase SEC0315 - Video Download $20.00

The video looks at various aspects around traffic decryption on Palo Alto Firewall. We will be focusing on two commonly-used SSL decryption features namely SSL Forward Proxy and SSL Inbound Inspection to inspect user outbound internet, and inbound to our public-facing server. We will look at a way to prevent FW evasion with SSH tunneling using SSH Proxy. The lab finishes with a discussion around QUIC protocol.

Part 2 of this video covers SSL Inbound Inspection


  • SSL Forward Proxy
    • Trusted Certificate
    • Untrusted Certificate
    • SSL Decrypt Opt-out
  • SSL Inbound Inspection
    • Certificate/Key Import
  • Decryption Profile
  • Decryption Policy    
  • SSH Proxy
  • Quic

About Author

Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at, Metha enjoys learning and challenges himself with new technologies.