This post covers the "Forward Proxy" decryption scenario in the OCI Network Firewall, which asumes that the clients are located in an VCN subnet and the server is located outside of OCI.