Re: paloalto firewall

[Chris Edwards <chris () ENG GLA AC UK>]

As others have said, the device is performing a middle-person attack.  For
this to work you have to install a certificate on all your desktops.

This is easier for some sites than others.  And as Valdis says, those
sites who already have a private SSL PKI setup (in other words a campus
CA certificate already installed in everyone's browser) will not need to
touch the desktops...