Configuring SSL decryption with third-party devices using the CLI

Prev Next

Use the CLI commands in this topic to configure SSL decryption with third-party devices on the NX 300 models or NX 400 models.

To configure SSL decryption with third-party devices on the NX 300 models:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Enable a different interface to receive decrypted SSL traffic on the Network Security appliance.

    hostname (config) # policymgr session interface enable
  3. Save your changes.

    hostname (config) # write memory
To configure SSL decryption with third-party devices on the NX 400 models:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Add a VLAN tag to traffic that arrives on a different port pair.

    hostname (config) #_debug foxd config custom enable
    hostname (config) # _debug foxd config custom vlan enable
  3. Enable a different interface to receive decrypted SSL traffic on the Network Security appliance.

    hostname (config) # policymgr session interface enable
  4. Save your changes.

    hostname (config) # write memory
  5. Verify the status of VLAN support.

    hostname (config) # _debug show foxd config custom
    foxd customized config: yes
      vlan support        : yes
      ........
  6. Restart the network content processing engine on the appliance.

    hostname (config) # pm process foxd restart
  7. Restart the process to submit files to the virtual machine (VM) for a complete analysis.

    hostname (config) # pm process silverfish restart