Decrypted SSL traffic

[joiner]

We are using Cisco IDSM-2 for a e-Commerce client. The Auditor from the client wants to know that how the IDSM get access to the decrypted SSL traffic? To do so, do we have to import the servers' certificate and private key into the IDSM?

Are there any document that I can refer to? Thanks in advance.

[rhermes]

Cisco IPS sensors, including the IDSM-2 can not inspect traffic inside an encrypted SSL session.

McAfee IPS sensors however can do this.

- Bob