Best Practices for https decryption in WSA

[Jay Tiwari]

Hi Experts,

My customer has https traffic decryption policy and wants to know industry best practices for this feature deployment.

Any pointer will be great help.

Regards,

Jay

[balaji.bandi]

i have used attached guides to deploy myself for a couple of clients' works charm. (make sure you understand well)

[Mario Arellano]

Hello Jatiwari,

You also want to make sure to exclude traffic from your government/financial institutions/medical institutions. 

I would discuss the above with your cyber legal team. 

[shgrover]

Hello Jatiwari,

Please use the document below for best practices for Cisco WSA however how to set the decryption policies depends on your organizations and the country. The data you are allowed to decrypt or not depends on your Countries cyber laws. Even if you are allowed to decrypt something , more decryption will need more resources and can play with the performance of the device. I request you to analyse the customer requirement, check the legal requirements for the customer location and proceed accordingly.

https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/guide-c07-742373.html

Regards

Shikha Grover

PS: Please don't forget to rate and select as validated answer if this answered your question