Mirror and Decrypt
Next Generation Security Gateway Guide R80.20 | 44
5 Above the existing Cleanup rule, add the applicable rules for the traffic you wish to
Mirror and Decrypt.
You must configure the Mirror and Decrypt rules as follows:
• Name - Must contain one of these strings (angle brackets are mandatory):
<M&D>, <M&d>, <m&D>, or <m&d>
• Source - Select the applicable objects
• Destination - Select the applicable objects
• VPN - Must leave the default *Any
• Services & Applications - Select the applicable services (to decrypt the HTTPS
traffic, select the applicable HTTP, HTTPS, or Proxy services)
• Action - Must contain Accept
• Track - Select the applicable option (None, Log, or Alert)
• Install On - Must contain one of these objects:
• *Policy Targets (this is the default)
• The objects of Virtual Systems, whose version is R80.20
Important:
• In the Mirror and Decrypt rules, you must
not
select Content criteria, such as
Application, URL Filtering, Service matched by IP Protocol, Content Awareness.
• Above the Mirror and Decrypt rules in this Ordered Layer, you must
not
configure
other rules that contain Content criteria, such as Application, URL Filtering, Service
matched by IP Protocol, Content Awareness.
• You must configure rules that contain an excluded source or an excluded destination
above the Mirror and Decrypt rules.
The Name column of these rules cannot contain these strings:
<M&D>, <M&d>, <m&D>, or <m&d>.
6 Publish the session and install the Access Control Policy.
7 If in a Mirror and Decrypt rule you set the Track to Log, then you can filter the logs for
this rule by the Access Rule Name, which contains the configured string:
<M&D>, <M&d>, <m&D>, or <m&d>.
To Next Page