Firewall working as proxy for mail server

inderjit21 — Mon, 04 Dec 2017 19:06:50 GMT

I have customer using TMG holding public ssl certificate for mail . The mail server doesnt have ssl certifcate.

Customer wants to eliminate TMG and using palo. Can palo hold the cert to authenticate the ssl . Mail server

sits behind the palo in trust zone.

So customer will login to https://customer_mail.com. which has public of the palo. Palo holds the cert for this domain,authenticates so customer doesnt get invalid cert . public ip is mapped to internal mail server.

Re: Firewall working as proxy for mail server

reaper — Tue, 05 Dec 2017 10:48:15 GMT

yes and no

You can load the certificate on the firewall and use it for ssl decryption. The firewall will function as a man-in-the middle proxy and inspect all traffic for malware and threats, but it will still require the endpoint server to communicate using SSL: the firewall cannot terminate the ssl, only act as a middle man.

topic Re: Firewall working as proxy for mail server in General Topics

Firewall working as proxy for mail server

Re: Firewall working as proxy for mail server