More and more enterprise traffic is being obscured by SSL, including some of the applications and sites that introduce the most risk for your business. This paper lays out a basic approach that you can use to strike an appropriate balance between security and performance by selectively decrypting and inspecting SSL traffic based on policy.