topic Re: SSL Policy in Network Security

SSL Policy

adamgibs7 — Fri, 21 Feb 2020 15:41:07 GMT

Dears,

I am creating a SSL policy and I m not understanding the concept of application column and port column inside the rule, the rule is made of, zone, network, application , users, category port, etc etc

As far I know 443 is a SSL encrypted traffic, apart from this 443 there can be other encrypted traffic working on different port ?? I want to understand if a application creator is building an application on port for example 1234 so he has the ability of encryption on that application for a specific port he chooses

thanks

Re: SSL Policy

yogdhanu — Mon, 30 Apr 2018 07:40:16 GMT

Yes, there can be SSL traffic on ports other then 443.

The application field is for applying the rule on specific application identified by firepower before the decryption is done. Port, Application and other factors are available to make the rule as specific as it can be.

All of matching are in AND operation. Meaning all the criteria defined in rule should match the packet for the rule to hit.

Hope it helps,

Yogesh

Re: SSL Policy

adamgibs7 — Mon, 18 Jun 2018 21:27:48 GMT

Dear Yogdhanu,

Thanks for the reply , so u r confirming me that the SSL traffic ( what i understand means encrypted traffic) can be on another port ( if it is used on private networks I can use private port numbers rages which cannot be used on internet)

The application field is for applying the rule on specific application identified by firepower before the decryption is done. Port, Application and other factors are available to make the rule as specific as it can be.

when the rule is matched the traffic is decrypted otherwise the default action is to Do not decrypt.

Please correct me if i am wrong

Thanks

Re: SSL Policy

adamgibs7 — Mon, 18 Jun 2018 21:28:40 GMT

Dears,

Anybody can put some shade on the below discussion.

Thanks