Figuring out what Decryption Policy is being used

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

Post Body

Hello everyone,

I have some users not being able to access some websites, I've gone thru the regular troubleshooting, added the URL on the custom no decrypt to exclude form decryption, but on something weird is happening.

On the Monitor URL Filtering, it says the website is NOT being decrypted but on the traffic it shows as yes. I have 8 decryption policies running, 5 being no decrypt and 3 being decrypt, how can I figure out what policy is decrypting the traffic? I have PAN-OS 9.1 and can't upgrade to 10.0 since we are running some important apps all this week and can't afford downtime. Is there a way to figure out what Decryption policy is decrypting the traffic from the CLI?

Author

Account Strength

80%

Account Age

4 years

Verified Email

Yes

Verified Flair

Total Karma

407

Link Karma

169

Comment Karma

238

Profile updated: 1 month ago

Posts updated: 3 months ago

istoleyowifi

PCNSA

Subreddit

r/paloaltonetworks

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.

Posted: 3 years ago
Reddit URL: View post on reddit.com
External URL: reddit.com/r/paloaltonet...