For Inspection Mode, select Flow-based.
For NGFW Mode, select Policy-based.
Select an SSL/SSH Inspection profile.