Known Key Decryption (Incoming Traffic)
This information applies only to legacy decryption policies and rules.
The Decrypt - Known Keydecryption rule action uses a server's private key to decrypt traffic. The Decrypt - Known Key rule action is used with incoming traffic; that is, the destination server is inside your protected network.
The main purpose of decrypting with a known key is to protect your servers from external attacks.
Prerequisite
To use the Decrypt - Known Key rule action, you must create an internal certificate object using the server’s certificate file and paired private key file.
|
The Firepower System does not support mutual authentication; that is, you cannot upload a client certificate to the Security Cloud Control and use it for Decrypt - Resign, or Decrypt - Known Keydecryption rule actions. |