Mirror and Decrypt

Mirror only
of all traffic

Your Security Gateway or Cluster clones all traffic (including HTTPS without decryption) that passes through it, and sends it out of the designated physical interface.

Mirror and Decrypt
of HTTPS traffic

Your Security Gateway or Cluster clones all HTTPS traffic that passes through it, decrypts it, and sends it in clear-text out of the designated physical interface.

Note - If you wish to decrypt the HTTPS traffic, you must enable and configure the HTTPS Inspection on your Security Gateway, or Cluster.

1

First network that sends and receives traffic through the Security Gateway (2).

2

Security Gateway, through which networks (1) and (3) send and receive their traffic.

3

Second network that sends and receives traffic through the Security Gateway (2).

4

Designated physical interface on the Security Gateway (2).

5

Recorder, or Packet-Broker that works in a monitor (promiscuous) mode.

A

Traffic flow between the first network (1) and the Security Gateway (2).

B

Traffic flow between the second network (3) and the Security Gateway (2).

C

Flow of the decrypted and mirrored traffic from the Security Gateway (2) to the Recorder, or Packet-Broker (5).

1

Read and follow the Mirror and Decrypt Requirements.

2

Prepare the Security Gateway, or each cluster member.

3

Configure the Mirror and Decrypt in the Security Gateway, or Cluster object in SmartConsole.

1

Read and follow the Mirror and Decrypt Requirements.

2

Prepare the VSX Gateway, or each VSX cluster member.

3

Configure the Mirror and Decrypt in the Virtual System object in SmartConsole:

• For one Virtual System
• For several Virtual Systems

Mirror only of all traffic

MAC address of the designated physical interface.

Mirror and Decrypt of HTTPS traffic

00:00:00:00:00:00: