You're reading from Mastering Palo Alto Networks Deploy and manage industry-leading PAN-OS 10.x solutions to secure your users and infrastructure

Product type Paperback

Published in Sep 2020

Publisher Packt

ISBN-13 9781789956375

Length 514 pages

Edition 1st Edition

Tools

Palo Alto Networks

Concepts

Networking

Author (1):

Tom Piens Aka 'Reaper'

View More author details

Table of Contents (18) Chapters

Preface

1. Section 1: First Steps and Basic Configuration

2. Chapter 1: Understanding the Core Technologies FREE CHAPTER

3. Chapter 2: Setting Up a New Device

4. Section 2: Advanced Configuration and Putting the Features to Work

5. Chapter 3: Building Strong Policies

6. Chapter 4: Taking Control of Sessions

7. Chapter 5: Services and Operational Modes

8. Chapter 6: Identifying Users and Controlling Access

9. Chapter 7: Managing Firewalls through Panorama

10. Section 3: Maintenance and Troubleshooting

11. Chapter 8: Upgrading Firewalls and Panorama

12. Chapter 9: Logging and Reporting

13. Chapter 10: VPN and Advanced Protection

14. Chapter 11: Troubleshooting Common Session Issues

15. Chapter 12: A Deep Dive into Troubleshooting

16. Chapter 13: Supporting Tools

17. Other Books You May Enjoy

Leave a review - let other readers know what you think

Leveraging SSL decryption to break open encrypted sessions

SSL/TLS and SSH decryption perform a man-in-the-middle attack but for good instead of evil—an encrypted session is intercepted, then through the use of trusted certificates, the session is deciphered and the payload is made visible for content inspection and App-ID to take a look at. There are three modes of SSL decryption currently available:

SSH proxy
SSL forward proxy
SSL inbound inspection

Let's look at each of them in detail.

SSH proxy

SSH proxy allows the interception of SSH sessions. It requires a decryption profile that contains a trusted root signing certificate, a Certificate Authority (CA), and allows you to control tunneling over an SSH session by setting a security policy for ssh-tunnel.

SSL forward proxy

SSL forward proxy is used for all outbound sessions. There are two distinct directions, and the outbound option is proxied because of how certificates are used to...