Cisco FMC Reporting - Bandwidth Statistics

[filipe.marins]

Hello,

I read in forums that even without SSL inspection (Man-in-the-middle) enabled the FMC can get information about certificates to make decisions in inspections.
I know that an encrypted file is not inspected (malwares can use this to bypass security controls). Despite this, can FMC understand how much traffic bytes are transferred in a session ssl without SSL inspection (decrypt \ resign)?

This is important for my bandwidth consumption reports

[Marvin Rhoads]

FMC is not strong on detailed reporting like you're asking about. Cisco usually steers customers to the WSA for robust reporting.

This may change going forward with things like enhanced capabilities in CDO management but for now you're limited.

[filipe.marins]

I know that FirePower is not a proxy solution. Because of that, especially for ssl traffic, the visibility of the web traffic is not complete. The aquisition of the WSA are not a goal fot the moment

So I need to design any reports for my leader with FMC.

The question is: Can I see total traffic rx / tx for an HTTP (s) connection? Or for this I need to have ssl inspection for the FirePower act as a MitM ant the make deep inspection on encrypted packets?