Skip to content

Commit f67e593

Browse files
author
cibot
committed
Definitions Update otis
1 parent 0664c96 commit f67e593

File tree

1 file changed

+20
-1
lines changed

1 file changed

+20
-1
lines changed

alsdkdefs/apis/otis/otis.v3.yaml

Lines changed: 20 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,6 +114,7 @@ info:
114114
A client is allowed to specify the following options:
115115
116116
* [abs_follow_internal_scan_schedules](#abs_follow_internal_scan_schedules)
117+
* [agent_assisted_decryption](#agent_assisted_decryption)
117118
* [cross_network_protection](#cross_network_protection)
118119
* [discovery_scan_frequency](#discovery_scan_frequency)
119120
* [external_scan_frequency](#external_scan_frequency)
@@ -156,7 +157,25 @@ info:
156157
157158
By default, agent configurations are generated out of agent-based scanning
158159
schedules, and the assumed value is `false` if the option is undefined.
159-
160+
161+
<a name="agent_assisted_decryption"/>
162+
163+
This option allows IDS agent to capture TLS session keys for supported libraries,
164+
enabling decryption of captured TLS traffic for threat analysis.
165+
Warning: May expose otherwise hidden sensitive data to Fortra back end.
166+
167+
For example:
168+
169+
```
170+
{
171+
"name": "agent_assisted_decryption",
172+
"scope": {
173+
"deployment_id": "AAAAAAAA-AAAA-AAAA-AAAA-AAAAAAAAAAAA"
174+
},
175+
"value": true
176+
}
177+
```
178+
160179
<a name="cross_network_protection"/>
161180
162181
### cross_network_protection

0 commit comments

Comments
 (0)