SSL forwarding profiles work together with SSL inspection rules and allow you to specify the devices to which a copy of the decrypted traffic should be forwarded. The copy will be sent in case of a successful decryption of the traffic according to the SSL inspection rule and selected SSL profile.
To create an SSL forwarding profile, go to the Libraries ➜ SSL forwarding profiles section, click Add, and provide the desired settings:
|
Name |
Description |
|---|---|
|
Name |
The name of the SSL forwarding profile. |
|
Description |
A description of the SSL forwarding profile. |
|
Forwarding type |
The available forwarding types are:
|
|
Destination MAC address |
The MAC address of the device to which a copy of the decrypted traffic should be redirected. Specified if L2 is selected as the forwarding type. |
|
Forward to interface |
The name of the interface to which a copy of the decrypted traffic should be forwarded. Specified if L2 is selected as the forwarding type. |
|
GRE source IP |
The source IP address for the GRE tunnel. Specified if L3 is selected as the forwarding type. |
|
GRE destination IP |
The destination IP address for the GRE tunnel. Specified if L3 is selected as the forwarding type. |