How to View Decrypted Traffic

Resolution

This article will describe multiple ways to confirm whether traffic has been decrypted or not.

CLI

To confirm decrypt on the CLI, use the following command:

> show session all filter ssl-decrypt yes

Decrypted sessions will have an * (asterisk) associated with them. Viewing the session ID will mark application 'app-name (proxy)', confirming that session is decrypted.

WebGUI

To confirm that the traffic is decrypted inside the WebGUI > Monitor > Logs > Traffic. Click the magnifying glass icon in the traffic log entries to confirm that the connections were decrypted.

A screenshot of a computer AI-generated content may be incorrect. You will see the "Decrypted " checkbox checked when the traffic is decrypted.

Another way to validate the decrypted session is by enabling the column "Decrypted" as below Traffic logs . This can be done by clicking on the arrow down next to any column title and selecting the Columns > Decrypted.

A screenshot of a computer AI-generated content may be incorrect.

A screenshot of a computer AI-generated content may be incorrect. Traffic logs after enabling the Decrypted column.