Create a Decryption Profile

Step 1

In the Security Cloud Control platform menu, choose Products > Multicloud Defense .

Step 2

Navigate to Policies > Profiles > Decryption.

Step 3

Click Create.

Step 4

Specify a Profile Name and a Description.

Step 5

For Certificate Method choose Select Existing.

Step 6

For Certificate choose the desired certificate.

Step 7

For Min TLS Version choose the lowest TLS version that is accepted by the decryption profile. The default is TLS 1.0.

Step 8

If using non-default (non-PFS) cipher suites, select the set of desired cipher suites from the Diffie- Hellman or PKCS (RSA) menus. Note that the Multicloud Defense Controller filters the available cipher suites so only the strongest ciphers are listed, dependent on the min TLS version you selected in step 6.

Step 9

Click Save.