If you are translating traffic that is incoming to an internal server which is reached via a public ip by. For all nat processes the firewall reads the. To configure a decryption policy for rule 1 go to policies decryption add at the bottom.