topic Re: SSL decryption FirePower - span port in Network Security https://community.cisco.com/t5/network-security/ssl-decryption-firepower-span-port/m-p/3565284#M135261 <HTML><HEAD></HEAD><BODY><P>You can't send any traffic out a span port on firepower.&nbsp; Passive ports don't send traffic.</P><P></P><P>If you do decrypt on Firepower, the 80% hit on throughput because everything is running on Software needs to be factored in.&nbsp; As long as you do that, you should be OK.</P><P><BR />At some point the encryption chips to enable SSL decryption in the FTD platforms will be enabled, and then the throughput should go up for SSL.</P></BODY></HTML> Thu, 13 Jul 2017 17:59:50 GMT Jason Gervia 2017-07-13T17:59:50Z SSL decryption FirePower - span port https://community.cisco.com/t5/network-security/ssl-decryption-firepower-span-port/m-p/3565283#M135260 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>does anyone know if it is possbible to span out decrypted traffic from FirePower 4110 (mirror port) ?</P><P></P><P>Also, does anyone have any good experience of using SSL inspection on FirePower?</P><P>Any pitfalls to be aware of?</P><P></P><P>Any feedback is much appreciated.</P></BODY></HTML> Wed, 24 May 2017 13:16:59 GMT https://community.cisco.com/t5/network-security/ssl-decryption-firepower-span-port/m-p/3565283#M135260 magnus123 2017-05-24T13:16:59Z Re: SSL decryption FirePower - span port https://community.cisco.com/t5/network-security/ssl-decryption-firepower-span-port/m-p/3565284#M135261 <HTML><HEAD></HEAD><BODY><P>You can't send any traffic out a span port on firepower.&nbsp; Passive ports don't send traffic.</P><P></P><P>If you do decrypt on Firepower, the 80% hit on throughput because everything is running on Software needs to be factored in.&nbsp; As long as you do that, you should be OK.</P><P><BR />At some point the encryption chips to enable SSL decryption in the FTD platforms will be enabled, and then the throughput should go up for SSL.</P></BODY></HTML> Thu, 13 Jul 2017 17:59:50 GMT https://community.cisco.com/t5/network-security/ssl-decryption-firepower-span-port/m-p/3565284#M135261 Jason Gervia 2017-07-13T17:59:50Z