Configuring SSL/TLS decryption on the Palo Alto

[@nitinjayswal1527]

Your videos are short and crisp...keep doing the good work

[@mohamedhaneef6379]

Thanks, @Ed Goad. Could you please clarify why would we require two certificates? As you have created one Trusted-Cert and another Untrusted-Cert.

[@MrRokkit]

Presumably because when Palo Alto reach out to a side that *it* doesn't trust, it needs a way to tell your browser. _But_ it still wants to be able to own the cert to perform description for itself.

[@PowerUsr1]

Good job Ed

[@gamuchiraindawana2827]

Where can I purchase the firewall? Is it on Amazon?

[@eddiek8185]

I'm assuming the local machine the certificate was exported to and installed is the Active Directory server?

[@oseexplica2807]

Excellent, tks!

[@SuperChelseaSW6]

Is it a good option for monitoring purposes to deploy the self signed created by palo alto to end users in an organization? Is it common?

[@thomasshredster4627]

Hi , can this help block whatsapp file transfer? like , so the site itself and chatting would work but the ability to send and receive files be blocked..?

[@DanielYengle]

Damn it Ed. Reply to your comments. Great video btw.

[@Ryan-vw8sq]

Thanks Ed. Do I need to export the untrusted-ca and install that also to the local machines?

[@CRK1918]

When it is untrusted will get you a warning, such as going to your local router