ASA5525-X SSL Decryption

[abdelfatah91]

Hi ,

I am new with dealing with Sourcefire , I have a question to ask , 

is 5525x platform with sourcefire module version 4.0.2 and Defense center 5.4.1 capable alone to decrypting the SSL traffic ? 

appreciating your help guys 

[pazzi]

Hi there

Only series 3 FirePOWER appliances running 5.4 support SSL decryption policies.

http://www.cisco.com/c/en/us/td/docs/security/firesight/540/relnotes/FireSIGHT-System-Release-Notes-v5-4.html#pgfId-222602

Paul

[Marvin Rhoads]

Even if a future release supports SSL decryption (as was hinted at during Cisco Live), the CPU burden will be significant.

Also, SSL decryption can also be very cumbersome for outgoing traffic (requiring PKI, certificate trust relationships, etc.)

Be careful what you wish for.