topic Re: Does SSL Inspection Affect Azure Integration? in Cloud Firewall

Does SSL Inspection Affect Azure Integration?

Nicholas_Sherid — Tue, 20 Nov 2018 16:01:55 GMT

Hi forum,

My azure integreation failed recently and I think it relates to the Managment Servers Azure HTTP calls being routed through the firewall that's doing the SSL inspection. So I am expecting the SSL validation to fail as the Management server lacks the root certificate in it's trust store to verify the firewall masquerading as microsoft to be geniune.

Anyone had this? I will start digging deeper but I just wanted to run it past you guys - thanks!

Nik

Re: Does SSL Inspection Affect Azure Integration?

PhoneBoy — Tue, 20 Nov 2018 19:22:41 GMT

My first guess would be that you need to exclude the management from HTTPS Inspection.

There may be another way to achieve this (for example add the CA key to the root store used by the CloudGuard Controller).

Will check.

Re: Does SSL Inspection Affect Azure Integration?

Nicholas_Sherid — Tue, 20 Nov 2018 19:48:05 GMT

Hi dameon,

yeah i wasn’t sure if I could treat Gaia like any other Linux box and update the cert store then find out TAC won’t support me anymore

got to say... arrgghh... I didn’t realise you could exclude ssl inspection so I’ll google that but I’m not too sure what the targets are for the azure API

really appreciate the help - I’ll post up any solution I find that works for me too!!!

Re: Does SSL Inspection Affect Azure Integration?

Matthias_Haas — Wed, 21 Nov 2018 12:48:07 GMT

Hi Nicholas,

I am not 100% sure, but could you check if the Mng Server is conneting to management.azure.com for the Azure Integration ? May be login.windows.net is also used

Best Regards

Matthias

Re: Does SSL Inspection Affect Azure Integration?

PhoneBoy — Wed, 16 Jan 2019 00:59:37 GMT

Just to come back to this thread, you should be able to add the relevant HTTPS Inspection certificate to $CPDIR/conf/ca-bundle-public-cloud.crt on the gateway.

Then execute vsec stop; vsec start to activate it.

Re: Does SSL Inspection Affect Azure Integration?

Nicholas_Sherid — Wed, 16 Jan 2019 08:43:06 GMT

Dameon Welch-Abernathy‌ thanks - I'll give that a shot and advise!