show policymgr ssl-intercept network

Displays the status of the network policy rules configuration for SSL interception.

For details about how to configure SSL interception, see the "Configuring SSL Interception" chapter of the Network Security User Guide.

Syntax

show policymgr ssl-intercept network

Parameters

None.

Output fields

The following table describes the output fields for the show policymgr ssl-intercept network command. Fields are listed in the approximate order in which they appear in the output.

Field	Description
Total CIDR Rule Supported	Total number of rules that are supported for the network policy in CIDR format.
Total CIDR Rule Configured	Total number of rules that are added to the network policy in CIDR format.
INTF	Network port pair designation (A through F) that is configured on the appliance interface. If all the network port pairs are configured, `ALL` is displayed.
IP	IPv4 source or destination address and mask in CIDR notation. If any IPv4 address and mask for the network port pair will be watched, `any` is displayed.
ACTION	Action to perform on traffic matching the network policy rule. decrypt—Decrypt HTTPS traffic matching the rule. This is the default action for the network policy rule. pass-through—Bypass traffic that matches the rule.

Example

The following example displays the status of the network policy rules configuration for SSL interception.

hostname # show policymgr ssl-intercept network

Total CIDR Rule Supported: 512
Total CIDR Rule Configured: 3

INTF     IP              ACTION
A       ANY            decrypt
B   11.14.32.0/24      decrypt
A   12.23.22.0/24    pass-through

User role

Administrator, Monitor, or Analyst

Command mode

Enable

Supported appliances

This command is supported on the following appliances running the specified releases or later:

Network Security: Release 8.2.1. The command output was modified to display a total of 512 network policy rules in Release 8.3.2.