Decryption gives the firewall visibility into encrypted traffic, but not everything can or should be decrypted. Some applications break when a middlebox decrypts them, and some traffic should stay private for legal or ethical reasons. Planning exclusions is part of every decryption rollout, and doing it well is what lets you decrypt most traffic without a flood of help desk calls. Palo Alto's guidance is to decrypt as much as you can and exclude only what you must, documenting a reason for every exception so auditors and future administrators understand why it exists.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.