Configuring SSL/TLS decryption on the Palo Alto

A walk-through of how to configure SSL/TLS decryption on the Palo Alto. SSL/TLS decryption is used so that information can be inspected as it passes through the Palo Alto. This allows for a man-in-the-middle (MITM) inspection and management of the encrypted traffic.

[@nitinjayswal1527]

Your videos are short and crisp...keep doing the good work

[@PowerUsr1]

Good job Ed

[@eddiek8185]

I'm assuming the local machine the certificate was exported to and installed is the Active Directory server?

[@mohamedhaneef6379]

Thanks, @Ed Goad. Could you please clarify why would we require two certificates? As you have created one Trusted-Cert and another Untrusted-Cert.

[@MrRokkit]

Presumably because when Palo Alto reach out to a side that *it* doesn't trust, it needs a way to tell your browser. _But_ it still wants to be able to own the cert to perform description for itself.

[@oseexplica2807]

Excellent, tks!

[@SuperChelseaSW6]

Is it a good option for monitoring purposes to deploy the self signed created by palo alto to end users in an organization? Is it common?

[@gamuchiraindawana2827]

Where can I purchase the firewall?
Is it on Amazon?

[@Ryan-vw8sq]

Thanks Ed. Do I need to export the untrusted-ca and install that also to the local machines?

[@thomasshredster4627]

Hi , can this help block whatsapp file transfer?
like , so the site itself and chatting would work but the ability to send and receive files be blocked..?

[@DanielYengle]

Damn it Ed. Reply to your comments. Great video btw.