We are new to IPS / NS9100s.
I am curious about your SSL decryption strategy. From the documentation it seems that we can only protect our servers (or devices for which we have private keys for). This makes sense.
Most attackers will use secure transport such as SSL or SSH to fly their payload under the radar.
So how could I catch this? It is even possible?