Skip to main content
dieter
New Member
February 5, 2018
Question

filter log on ssl inspection

  • February 5, 2018
  • 1 reply
  • 6710 views

Is there a filter in log/session view to show only ssl inspected traffic/sessions ?

    1 reply

    dieter
    dieterAuthor
    New Member
    July 13, 2018

    anyone ?

    emnoc
    New Member
    July 13, 2018

    diag sys session list would be the way to go from a CLI  and look at that policy. You can  set filters for the policy.id#

     

    dieter
    dieterAuthor
    New Member
    July 16, 2018

    Thank you, emnoc, for your suggestion. In the output of diag sys session list, what indicates wether a session was inspected/decrypted or not ? Other vendors use specific flags for that.

    Not all sessions going through a specific policy will be decrypted (eg ssl inspection exemption categories).

     

    And how would one identify causes for SSL inspection failures (eg unsupported ciphers)?