The deep packet inspection on SSL Decryption via Publicly signed Certificate

Mohammed_Yasin — Sun, 14 Aug 2022 12:00:00 GMT

Regarding using a Publicly signed certificate for SSL decryption.

Is the deep packet inspection possible or not?

Is there any impact?

Re: The deep packet inspection on SSL Decryption via Publicly signed Certificate

dmifsud — Mon, 15 Aug 2022 12:58:07 GMT

For Inbound Decryption, the server cert can be signed by a Public CA. The firewall does need the private key of the cert though.

For Forward Proxy, it doesn't matter since you can't get a CA cert from a Public CA. Someone like godaddy will not let you sign certs for them. You can use firewall generated or private PKI.

topic The deep packet inspection on SSL Decryption via Publicly signed Certificate in General Topics

The deep packet inspection on SSL Decryption via Publicly signed Certificate

Re: The deep packet inspection on SSL Decryption via Publicly signed Certificate