Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Configuring FDM-Managed Devices FDM Policy Configuration SSL Decryption Policy Configure SSL Decryption Policies Configure the Default SSL Decryption Action Procedure

Last updated: Jun 09, 2025

Procedure

Before you begin

If you have not already, review these procedures and follow the procedures in them:

  1. Configuring SSL Decryption Policies

  2. Enable the SSL Decryption Policy

Procedure

1

In the left pane, click Security Devices.

2

Click the Devices tab to locate the device or the Templates tab to locate the model device.
3

Click the FTD tab and select the device for which you want to configure the default SSL decryption action.

4

Click Policy in the Management pane at the right.
5

Click SSL Decryption in the policy bar.
6

Click the Default Action button.

7

Select the action to apply to matching traffic:

  • Do Not Decrypt—Allow the encrypted connection. The access control policy then evaluates the encrypted connection and drops or allows it based on access control rules.

  • Block—Drop the connection immediately. The connection is not passed on to the access control policy.
8

(Optional.) Configure logging for the default action. You must enable logging to capture events from SSL Decryption policies. Select from these options:

  • At End of Connection—Generate an event at the conclusion of the connection.

    • Send Connection Events To—If you want to send a copy of the events to an external syslog server, select the server object that defines the syslog server. If the required object does not already exist, click Create New Syslog Server and create it. (To disable logging to a syslog server, select Any from the server list.)

      Because event storage on the device is limited, sending events to an external syslog server can provide more long term storage and enhance your event analysis.

      If you have a subscription to Cisco Security Analytics and Logging, specify or create the syslog server using a Secure Event Connector's IP address and port. See Cisco Security Analytics and Logging for more information about this feature.

  • No Logging—Do not generate any events.
9

Click Save.

10

Review and deploy now the changes you made, or wait and deploy multiple changes at once.
Previous topic Configure the Default SSL Decryption Action Next topic Configure SSL Decryption Rules