Inspection of GRE Traffic Overview
Generic Routing Encapsulation (GRE) is a tunneling protocol designed to encapsulate a wide variety of network layer packets inside IP tunneling packets. The original packet is the payload for the final packet. The protocol is used on the Internet to secure virtual private networks.
To inspect the payload of an encapsulated packet, the IDP process engine must decapsulate it. IDP Series appliances support decapsulation for IP-in-GRE and PPP-in-GRE. You can configure decapsulation for one or two layers.

