topic Re: HTTPS inspection in Firewall and Security Management

HTTPS inspection

Pantsu — Fri, 06 Sep 2019 07:49:48 GMT

hello

my checkpoint works as proxy server with https inspection .
I changed ip address of proxy in client machine side (set up another ip address of gateway) everything works but , HTTPS Inspection doesnot works , when i back the old ip, it works.
I think HTTPS inspection is not active for the new ip address, how i can solve this problem ?

thankyou

Re: HTTPS inspection

PhoneBoy — Fri, 06 Sep 2019 21:49:08 GMT

How is this screen configured?

Re: HTTPS inspection

HeikoAnkenbrand — Sat, 07 Sep 2019 20:18:46 GMT

Hi @Pantsu

If you are using the firewall as explicit proxy, you have to set your gateway object or cluster object as destination in the https interception rule.

Here "internet" should not be used as destination.

Then it should work.

Re: HTTPS inspection

Pantsu — Mon, 09 Sep 2019 09:09:57 GMT

I have a specific interface selected and have specific ip addresses, i think it is also true. but it doesnot inspect traffic and in client side it doesnot use certificate , when i use old ip address than it is working.