Ssl outbound decryption

Sarou22 — Tue, 13 Aug 2024 16:51:03 GMT

Hello,
when a client want to connect to a serveur on thé Internet ,the Palo Alto Networks device intercepts the client SSL request and generates a certificate on the fly for the site the client was visiting. In this step what will be the intermediate chain and the root chain of this new certificate? The same as the server on the internet?

Which key will be used by the client to encrypt traffic between it and the firewall?

What key will the firewall use to decrypt the customer's traffic?

Thanks

Re: Ssl outbound decryption

Claw4609 — Wed, 14 Aug 2024 02:29:05 GMT

Hello,

"In this step what will be the intermediate chain and the root chain of this new certificate? The same as the server on the internet?"

- The client would be presented with a cert that is signed by your Forward Trust Certificate that you have selected in your firewall. So if you went to google.com it would be a google.com cert signed by your Forward Trust Certificate.

"Which key will be used by the client to encrypt traffic between it and the firewall?"

- Your Forward Trust Certificate. The firewall wouldn't have access to the private key of a server on the internet (assuming you don't control this server)

topic Ssl outbound decryption in General Topics

Ssl outbound decryption

Re: Ssl outbound decryption