Author Topic: Inbound SSL Decryption (Read 10625 times)

Pacerfan9 · « **on:** May 14, 2016, 06:55:52 PM »

I watched the ASA Firepower 6.0 SSL Decryption video and configured my lab following the first scenario with inbound decryption. I imported my Internal Certificate and configured the policy according to the video. However when I review the connection events my SSL traffic is not decrypted, the SSL status is Do Not Decrypt (Handshake Error). Any suggestions on how to troubleshoot and resolve this?

MC · « **Reply #1 on:** May 16, 2016, 09:57:43 PM »

I assume the connection still works, just not being decryption by FP. Handshake failure can be a result of key length, or crypto suite mismatch between client and server. Would you be able to do packet capture to analyze SSL negotiation?

Search

User Info

Author Topic: Inbound SSL Decryption (Read 10625 times)

Pacerfan9

Inbound SSL Decryption

MC

Re: Inbound SSL Decryption

Related Topics