topic Re: publishing a site website service with ssl decryption in General Topics

publishing a site website service with ssl decryption

chuckles — Thu, 23 Apr 2020 14:33:44 GMT

I have an internal server which i want to publish its service to public and need to do ssl decryption, does that means i need to do "inbound ssl decryption"?

and if so, as the website is natted from outside to inside, in the decryption rule in the destination, do i put the public ip or the natted ip?

Re: publishing a site website service with ssl decryption

jdelio — Thu, 23 Apr 2020 19:27:02 GMT

@chuckles , Yes, In order to decrypt traffic to/from an Internal Web server, you will need to configure SSL Inbound decryption.

You will configure the Decryption rule to take affect before the NAT as the Firewall will be answering on behalf of the web server,

Please check out the SSL decryption resource list to help answer any additional questions:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClgHCAS

Re: publishing a site website service with ssl decryption

chuckles — Thu, 23 Apr 2020 19:32:05 GMT

so i would put the public ip of the internal server in the rule not the private ip after nat?

Re: publishing a site website service with ssl decryption

jdelio — Thu, 23 Apr 2020 20:16:04 GMT

Yes, the Public IP.