filter log on ssl inspection

[dieter]

Is there a filter in log/session view to show only ssl inspected traffic/sessions ?

[dieter]

anyone ?

[emnoc]

diag sys session list would be the way to go from a CLI  and look at that policy. You can  set filters for the policy.id#

[dieter]

Thank you, emnoc, for your suggestion. In the output of diag sys session list, what indicates wether a session was inspected/decrypted or not ? Other vendors use specific flags for that.

Not all sessions going through a specific policy will be decrypted (eg ssl inspection exemption categories).

And how would one identify causes for SSL inspection failures (eg unsupported ciphers)?