Hi, I have a question about the proper design when using FTD with SSL decryption. When I want to use decryption and I want to decrypt traffic for inspection I need to replace the certificate but in case this certificate is trusted there is a problem also with client which use Chrome and Firefox (and many other browsers) - they check the certificate name (for example Firefox is using Strict transport Security - HTTP Strict Transport Security (HSTS - see RFC 6797) and also have their own CAs (I mean for the Firefox).
What is the recommendation and best practice from Cisco, when we wan to use SSL decryption in a huge mesh environment like an ISP ( Internet service Provider) and also check this traffic (you know today approximately 80% percent of the traffic is encrypted)?
