Decryption Policy

You can use Decryption policies to create groups of rules that define which traffic should be decrypted based on match criteria such as source IPs and destination IPs. Each decryption policy could have its own match criteria, along with an associated action. The actions are defined in the Decryption Policy's action field.

Behavior

Decryption rules are applied in order of priority (rule order). The rules are created at a certain priority, without any rule auto-priority. All rules are created manually, with no system or default rules available.

Decryption Policy Types

Decryption policy rules define what type of traffic needs to be decrypted. You can specify this as the “match criteria.” This type of traffic includes:

• DPI-SSL Client Rules
• DPI-SSL Server Rules
• DPI-SSH Rules