1. A method, comprising: analyzing data relating to users of a communication network, which carries multiple data connections conveying encrypted data, so as to establish one or more selection rules; selecting a subset of the multiple data connections based on the selection rules; and configuring an inspection device to decrypt the encrypted data conveyed by the data connections in the selected subset.