SSL Forward Proxy decryption policy decrypts and inspects SSL/TLS traffic from internal users to the web.

The SSL Forward Proxy Firewall creates a certificate intended for the client that is intercepted and altered by the firewall.

If the server's certificate is signed by a CA that the firewall does not trust, the firewall will use the certificate only on Forward Trust.

The firewall resides between the internal client and internal server to intercept traffic between the two.