How To Configure SSL Forward Proxy Decryption On The Palo Alto Firewall | PART 8

Full Palo Alto 0-60 Playlist:

I'm Keith Barker, a 2x CCIE (Cisco Certified Internetwork Expert).

I'm am your guy if you are:

👉 New to IT and don't know where to start
👉Currently in IT, and want to learn more advanced ideas
👉 Anyone who wants to learn about the basics of technology in general

I believe that anyone can improve their situation by gaining new skills, especially in information technology.

New videos weekly!

Enjoy, Like, and Subscribe. 😃

Free YouTube Playlists from Keith:

[fabrice]

The WAN & only ladies & gentlemen, the OG of IT! Thank you Keith for being so awesome.

[ulimi]

I'm new to Palo and this series was more than I could hope for. Excellent!

[dariusbradford]

No way! Perfect timing, I got SSL decryption deployment for a customer! Thnx!!

[joshstickney]

Wish I had this 3 years ago. Maybe its from having seen it and figuring it out why and how this was done then stepping into a new company, but this explains it so easily. Love your quick and to the point explanations!

[AlexCruz-mvgj]

I've learned more from your videos on this topic than anything that I've used in the past. You will always be my go to for advancing in my career. Thank you!

[jamesworley]

I laughed at the comment about the 400 series being 'slow' to commit at about 2-3 minutes. PA-200 & PA-220 entered the chat/

[leanderjanlargo]

Amazing! Great video! Thank you for creating such educational and highly nformative content!

[pootere]

Great video! I need to get me a PA440. I've been managing PA820s for the last 4yrs at work for our sites, but I recently got a new job and no Palo Alto lol.

[RayAlejandroGaviriaAlegria]

Thanks so much for these videos. i needed

[nxu]

HI Keith, Thanks for this.I have got decryption up and running on a pilot basis on our network and the first thing we noticed was that it broke, YouTube, . The videos would freeze or not load the thumbnail etc. Could you doa video on troubleshooting t decryption errors please? Thanks.

[flower]

Hi @Keith Barker, Great explanation...
One question that arise in my Mind to implement is that "Can we use Wildcard Certs / Purchased public Certs for SSL Forward Proxy so that it will not require to install Certificate on each Client Machine.
Regards
Nadeem

[fourtsr]

Hey @Keith Barker, Thanks so much for these videos. I just installed one PA-440 and am at the Part 8 of this. I have never set up Certificate services on my 2019 AD server. Do you have a how to video on that so I can complete part 8 of the PA-440 configuration?

[kauffmann]

but if you set the decryption rule with the port 443 instead in the service https, would the decryption work even for quic?

[itzmwthunder]

Hey Keith, I’m currently deploying mine but I dint have a CA server. How can I make the FW self sing it certs without the Server?

[zulfikarmahyutan]

Hi Keith,
Great job on the configuration you shown! Just wondering, why when I put the x forwarder for security policy, the connection is reset. I was wonder why this issue happen when using user-id is is okay

[mzero]

Thanks Kaith great video and explanation :). a Quick Question, have you integrate Palo alto with AWS Certificate manager (ACM). I tried but there are some limitarions, dont know if there is a workaround or something that i missed.