display decryption-policy

Function

The display decryption-policy command displays configuration information of the SSL-encrypted traffic detection policy rule.

Format

display decryption-policy rule { all | name rule-name } [ slot-id slot-id cpu-id cpu-id ]

Parameters

Parameter	Description	Value
all	Indicates configuration information of all SSL-encrypted traffic detection policy rules.	-
name rule-name	Indicates the name of the SSL-encrypted traffic detection policy rule.	The SSL-encrypted traffic detection policy rule must exist.
slot-id slot-id	Specifies the slot ID of the SPU. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-
cpu-id cpu-id	Specifies the CPU ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

None

Example

# Display configuration information of all SSL-encrypted traffic detection policy rules.

<sysname> display decryption-policy rule all
Total:1
RULE ID   RULE NAME   STATE   ACTION   HITS
---------------------------------------------
0         default     enable  no-decryt 62
---------------------------------------------

**Table 1** Description of the **display decryption-policy rule all** command output
Item	Description
RULE ID	ID of the SSL-encrypted traffic detection policy rule.
RULE NAME	Name of the SSL-encrypted traffic detection policy rule.
STATE	Enable state of the SSL-encrypted traffic detection policy. Value options are as follows: enable: Enable disable: Disable This parameter can be configured using the enable (SSL-encrypted traffic detection policy rule view) command.
ACTION	Action of the SSL-encrypted traffic detection policy rule. Value options are as follows: decrypt: Decrypt traffic. deny: Block traffic. no-decrypt: Not decrypt traffic. This parameter can be configured using the action (SSL-encrypted traffic detection policy rule view) command.
HITS	Number of times that traffic matches the SSL-encrypted traffic detection policy. The parameter value can be reset using the reset decryption-policy counter command.