08-14-2022 05:00 AM
Regarding using a Publicly signed certificate for SSL decryption.
Is the deep packet inspection possible or not?
Is there any impact?
08-15-2022 05:58 AM
For Inbound Decryption, the server cert can be signed by a Public CA. The firewall does need the private key of the cert though.
For Forward Proxy, it doesn't matter since you can't get a CA cert from a Public CA. Someone like godaddy will not let you sign certs for them. You can use firewall generated or private PKI.
08-15-2022 05:58 AM
For Inbound Decryption, the server cert can be signed by a Public CA. The firewall does need the private key of the cert though.
For Forward Proxy, it doesn't matter since you can't get a CA cert from a Public CA. Someone like godaddy will not let you sign certs for them. You can use firewall generated or private PKI.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
