topic Curiosity about HTTPs Inspection in General Topics

Curiosity about HTTPs Inspection

Matlu — Wed, 08 Feb 2023 03:03:58 GMT

Hello, team.

I have a curiosity, the HTTPs Inspection mechanism, only works in the "Internal to External" direction, is this correct?

I mean, the packet will only be fully inspected when a user of a company's network tries to consume a web service, like cnn.com for example.
Is this theory correct?

Thanks for your comments.

Re: Curiosity about HTTPs Inspection

Chris_Atkinson — Wed, 08 Feb 2023 03:45:27 GMT

It can be configured for Inbound (servers) & Outbound (users).

Refer: sk108202 - Best Practices - HTTPS Inspection

Re: Curiosity about HTTPs Inspection

Matlu — Wed, 08 Feb 2023 04:08:58 GMT

Hello,

HTTPs Inspection works also in the sense of "Outbound -> Inbound"?

I mean if I publish a web page on the Internet, and someone from anywhere on the Internet, wants to visit my page, HTTPs Inspection will work by "inspecting" the whole package?

Greetings.

Re: Curiosity about HTTPs Inspection

Chris_Atkinson — Wed, 08 Feb 2023 04:41:40 GMT

Yes it can be configured for this as explained in the SK linked above to protect servers from being attacked from the Internet.

Some organizations might achieve this with a WAF or AppSec but it is also an option of the Firewall and ensures things like IPS are most effective.