About SSL Policy with vFMC

[yunsh63]

Hi.

Using vFMC and FP 8140.

OS version are 6.2.3.4.

And FP is using Passive mode.

This situation, I config the SSL Policy.

Make object, Make a Rule and Deploy.

But SSL Policy is not work.

Is the passive mode not working the ssl policy?

Thanks.

[Marvin Rhoads]

In a passive deployment, SSL decryption options are quite limited. For instance, you cannot decrypt and resign as that is necessarily an active deployment characteristic.

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/understanding_traffic_decryption.html#ID-2252-00000029