topic Re: Check Point Endpoint SSL Certificate Change impacts in Endpoint

Check Point Endpoint SSL Certificate Change impacts

TonyStark — Tue, 17 May 2022 05:42:35 GMT

Hello!

We want to change our Endpoint SSL-Certificate on our management server. We know how to do it but we don't know if there is any kind of impact to the client connections. So will the clients still be connected to the Endpoint-server or will they lose there connection due to a change of the fingerprint or similar?

Re: Check Point Endpoint SSL Certificate Change impacts

_Val_ — Tue, 17 May 2022 06:29:33 GMT

Can you elaborate please?

Re: Check Point Endpoint SSL Certificate Change impacts

TonyStark — Tue, 17 May 2022 06:42:49 GMT

We are running a Endpoint-Server with certificates signed by a internal CA. Nessus-scans report that the certificate is self-signed. Now we want to implement a CSR as done here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97648

The certificate is backed up and it seems to be the right "tutorial" thats what we need. But we also need to know if Clients will stay connected to the Endpoint-Server after implementing this or if they lose connection due to whatever reason there could be

Re: Check Point Endpoint SSL Certificate Change impacts

_Val_ — Tue, 17 May 2022 08:33:40 GMT

Firstly, you can ignore Nessus results, self-signed here does not present a security risk of any kind.
Secondly, you will have a wide endpoint impact, they will not be able to reconnect, until each client accepts the new cert, or is fully redeployed.

Re: Check Point Endpoint SSL Certificate Change impacts

ealtun — Tue, 17 May 2022 10:59:49 GMT

Hi,

firstly you need to create certificate and import for endpoint client .Than you need to create ssl inspection certificate and import to ssl inspection blade.Thats generel information for ssl inspection.

congratulations