SSL Decryption Placement

[fatalXerror]

Hi Guys,

I am just wondering where is the best placement for a firewall doing an SSL decryption? If I have a multi-tier firewall in the network, tier-1 which is facing outside network will definitely needs SSL decryption but how about internal firewall or DMZ side firewall?

Thanks

[balaji.bandi]

if the perimeter going via DMZ all the connection out, then DMZ is the right place. if not outside interface.

[fatalXerror]

Hi @balaji.bandi , is this means that no need to enable the SSL decryption for the internal firewall? Thanks

[balaji.bandi]

depends on the network as you said you have multi-tier FW, so I expect or suggest this to be the perimeter where it exits to the Internet oor internet edge FW.