Create a Decryption Profile

Use the following procedure to create a decryption profile.

Procedure


Step 1

Navigate to Manage > Profiles > Decryption.

Step 2

Click Create.

Step 3

Specify a Profile Name and a Description.

Step 4

For Certificate Method choose Select Existing.

Step 5

For Certificate choose the desired certificate.

Step 6

For Min TLS Version choose the lowest TLS version that is accepted by the decryption profile. The default is TLS 1.0.

Step 7

If using non-default (non-PFS) cipher suites, select the set of desired cipher suites from the Diffie- Hellman or PKCS (RSA) menus.

Step 8

Click Save.


What to do next

Attach the profile to a policy rule set. See Rule Sets and Rule Set Groups for more information.