Can Intelligence Services be encrypted/decrypted by MITM?

book

Article ID: 224913

calendar_today

Updated On:

Products

Security Analytics Security Analytics - VA

Issue/Introduction

Intelligence Services is a feature of Security Analytics that sends requests to the threat intelligence cloud for analysis.  Those responses come back and are sent to the appliance for review.  The requests are encrypted by default before sent externally.  

If there is a requirement to decrypt these messages before they arrive at the Security Analytics appliance, can SA handle the messages decrypted?

Environment

Release : 8.2.3

Resolution

The Intelligence Service or File Reputation Services (FRS) and Web Reputation Services (WRS) can be used through a Man In The Middle (MITM) decryption and re-encryption process.