topic I've four new next generation in Network Security

FirePower and SSL decryption

rashaabdallah — Tue, 12 Mar 2019 13:10:10 GMT

Dear Cisco Support,

I need to know what is the best recommendation for SSL decryption using ASA with Firepower capabilities.

We are having several POC using ASA 5506, and the clients need to see SSL decryption.

Awaiting your feedback as soon as possible

I've four new next generation

Alexvue — Wed, 14 Jun 2017 20:42:08 GMT

I've four new next generation Cisco ASA 5516-X, 5508-X and I'm not able to get any help configure SSL decryption with firepower. Cisco need to do a better job support this SSL decryption with the next generation firewall.

Re: I've four new next generation

Marvin Rhoads — Wed, 13 Sep 2017 17:32:37 GMT

In addition to the Configuration Guide, there are several how-to videos on the Internet showing how to do this.

That aside, you very seldom want to do that on those lower end platforms as SSL decryption is currently all done in software (not hardware). Because of that, the performance impact is significant.