Reputation: 13
For the decryption policy, the Palo alto firewall document state that decrypt SSL/TLS traffic requires a certificate but decrypt SSH doesn't.
SSH use symmetric key for encryption while SSL/TLS use certificate with public key in it
If SSH use public key-based authentication, why and how do firewall not needing certificate or encryption key to decrypt it.
"The key used for SSH decryption is automatically generated when the firewall boots up "
How do firewall know and generate the key ?
Upvotes: -3
Views: 29