The proxy based SSL decryption feature requires the proxy based SSL licenses to be assigned to specific Sensors. Configuration updates like signature set and policy updates are enabled only when a valid license is assigned to the Sensors. The license is provided as a .zip or .jar file which is supported by the Manager. The license procured contains the number of Sensors on which the inbound or outbound SSL decryption can be enabled.
Note
To obtain a demo license for proxy based SSL decryption, contact MB Licensing. An email containing the license will be sent from MB Licensing.
To procure a valid license for outbound proxy based SSL decryption and upload it in the Manager, refer to the following SKUs:
| Sensor Model | SKUs |
|---|---|
| NS9500 (Standalone) with 30 Gbps | SSL9530ECE-AT |
| NS9500 (Standalone) with 20 Gbps | SSL9520ECE-AT |
| NS9500 (Standalone) with 10 Gbps | SSL9510ECE-AT |
| NS9200 | OSLNS92ECE-AT |
| NS9100 | OSLNS91ECE-AT |
| NS7500 with 7.5 Gbps | SSL75075ECE-AT |
| NS7500 with 5 Gbps | SSL7505ECE-AT |
| NS7500 with 3 Gbps | SSL7503ECE-AT |
| NS7300 | OSLNS73ECE-AT |
| NS7200 | OSLNS72ECE-AT |
To procure a valid license for inbound proxy based SSL decryption and upload it in the Manager, refer to the following SKUs:
| Sensor Model | SKUs |
|---|---|
| NS9500 (Standalone) with 30 Gbps | SSL9530ECE-AT |
| NS9500 (Standalone) with 20 Gbps | SSL9520ECE-AT |
| NS9500 (Standalone) with 10 Gbps | SSL9510ECE-AT |
| NS7500 with 7.5 Gbps | SSL75075ECE-AT |
| NS7500 with 5 Gbps | SSL7505ECE-AT |
| NS7500 with 3 Gbps | SSL7503ECE-AT |
Note
For NS9500 Sensors, the same proxy based SSL license can be used for both Inbound and Outbound proxy based SSL decryption.