OCI Network Firewall - IAM Policy Required for SSL Decryption Feature (Doc ID 3052090.1)

Last updated on OCTOBER 07, 2024

Applies to:

Goal

This release includes the following enhancements:

Added support for inspecting tunnel traffic: Firewall policy components now inspect mirror out-of-band traffic in addition to inspecting in-line traffic paths. Inspect your clear-text tunnel traffic with VxLAN protocol using tunnel inspection rules and analyze your traffic.

Access to mapped secrets using resource principal-based policies: For certificate authentication, now you can manage your mapped secrets in the Vault service using resource principal-based policies.

Enhanced firewall logging: Now we support logging over 5000 loglines within 5-minute intervals in conjunction to higher shape firewalls.

Enhanced bulk importing for firewall policy components: You can now import tunnel inspection rules in bulk with the bulk import template.

New log for monitoring tunnel inspection for firewalls: Monitor your tunnel inspection with the help of the new tunnel inspection log.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.