topic Hi thereOnly series 3 in Network Security

ASA5525-X SSL Decryption

abdelfatah91 — Sun, 10 Mar 2019 13:25:02 GMT

Hi ,

I am new with dealing with Sourcefire , I have a question to ask ,

is 5525x platform with sourcefire module version 4.0.2 and Defense center 5.4.1 capable alone to decrypting the SSL traffic ?

appreciating your help guys

pazzi — Thu, 16 Jul 2015 03:06:48 GMT

Hi there

Only series 3 FirePOWER appliances running 5.4 support SSL decryption policies.

http://www.cisco.com/c/en/us/td/docs/security/firesight/540/relnotes/FireSIGHT-System-Release-Notes-v5-4.html#pgfId-222602

Paul

Marvin Rhoads — Thu, 16 Jul 2015 03:54:42 GMT

Even if a future release supports SSL decryption (as was hinted at during Cisco Live), the CPU burden will be significant.

Also, SSL decryption can also be very cumbersome for outgoing traffic (requiring PKI, certificate trust relationships, etc.)

Be careful what you wish for.