Create a rule-based decryption policy with other rule actions

Create and manage decryption policies in the Secure Firewall Management Center to control encrypted traffic actions, such as Do Not Decrypt, Block, Block With Reset, or Monitor.

To create a decryption rule with a Do Not Decrypt, Block, Block With Reset, or Monitor rule action, create a decryption policy and edit the policy to add the rule.

When you create a rule-based decryption policy , you can create multiple rules at the same time, including multiple Decrypt - Known Key rules, and multiple Decrypt - Resign rules.

If you enabled Change Management, you must create and assign a ticket before you can create a decryption policy. Before the decryption policy can be used, the ticket and all associated objects (like certificate authorities) must be approved. For more information, see Create change management tickets and Policies and objects that support change management.

Procedure

Step 1

Log in to Security Cloud Control if you haven't already done so.

Step 2

Click Administration > Integrations > Firewall Management Center and choose Policies > Access Control > Decryption.

Step 3

Perform these actions:

  1. Give the policy a unique Name and, optionally, a Description.

    The following characters are not supported in decryption policy names:

    • Leading period

    • #,;,{,},=,$,<,>

  2. Click Next.

  3. The bypass page is provided for your information only; you cannot bypass traffic for other types of decryption (such as Block).

  4. Click Create Policy.

  5. Wait for the policy to be created.

Step 4

Click Edit (edit icon) next to the decryption policy name.

Step 5

Click Add Rule.

  1. Give the rule a Name.

  2. From the Action list, click a rule action and see one of the sections for more information:

Step 6

Click Save.

What to do next