Create a standard decryption policy with inbound protection

Create a decryption policy to decrypt and inspect traffic directed to an internal server for enhanced network security monitoring.

This task creates a standard decryption policy to decrypt network traffic coming into your network. You typically do this to decrypt and inspect traffic directed to an internal server. All options on this page are required.

Before you begin

Review what an inbound protection decryption policy means in Incoming traffic decryption.

To create a decryption policy with outbound protection instead, see Create a standard decryption policy with outbound protection.

Follow these steps to create a standard decryption policy with inbound protection:

Procedure

Step 1

Log in to Security Cloud Control if you haven't already done so.

Step 2

Click Firewall.

Step 3

Click Administration > (name of management center).

Step 4

In the right pane, click Management > Policies.

Step 5

Click Create New > Decryption Policy.

Step 6

In the provided fields, enter a Name and optional Description.

The following characters are not supported in decryption policy names:

  • Leading period

  • #,;,{,},=,$,<,>

Step 7

Click Create Policy.

Step 8

Slide Inbound Decryption to Enabled as the following figure shows.

The diagram illustrates the steps involved in creating a policy with inbound protection, highlighting key components and their interactions within the security framework.