topic Re: Deploy HTTPS Inspection in General Topics

Deploy HTTPS Inspection

Luciano_Cirino — Fri, 02 Jun 2023 21:33:57 GMT

Hello everyone,

I hope you're all doing well.

I'm looking to deploy HTTPS Inspection for a specific web application, but I'm unsure where to start. Could someone please assist me? I'm in need of guidance on this matter.

Thank you in advance.

Re: Deploy HTTPS Inspection

the_rock — Fri, 02 Jun 2023 21:48:58 GMT

I would start below (last 3 links)

Andy

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecurityGateway_Guide/Topics-FWG/HTTPS-Inspection.htm?TocPath=_____24

Re: Deploy HTTPS Inspection

Matlu — Sun, 04 Jun 2023 01:54:34 GMT

Hey, Bro.

HTTPS Inspection, it's for LAN to WAN traffic, right?

Or does it work in reverse as well?

Although if it were in reverse, to protect my LAN traffic, I think it would be better to use a WAF.

Greetings.

Re: Deploy HTTPS Inspection

the_rock — Sun, 04 Jun 2023 15:10:23 GMT

Hey man,

So there is inbound and outbound https inspection. Most people would use outbound (LAN to WAN), but as you said, in reverse, you can also use WAF.

Andy

Re: Deploy HTTPS Inspection

Wolfgang — Sun, 04 Jun 2023 19:43:25 GMT

@Luciano_Cirino if you want to secure your web application ( traffic from external to your web application host) as I understand you need inbound HTTPS inspection. Configuring Inbound HTTPS Inspection

With HTTPS inspection enabled for access to your webserver you can use IPS, Antivirus,Antibot, Threat Emulation .. to inspect the traffic for malicious code. With this you get a WAF solution based on Check Point software.
If your web application is cloud based you should use CloudGuard for Application Security as WAF.

And there are other vendors with specialized solutions for WAF.

Re: Deploy HTTPS Inspection

the_rock — Sun, 04 Jun 2023 19:44:59 GMT

Good doc given to me by Sales...I believe it was created by one of their diamond engineers.

Re: Deploy HTTPS Inspection

PhoneBoy — Mon, 05 Jun 2023 15:47:35 GMT

In our local user groups, we do HTTPS Inspection Best Practice sessions.
You can see the last one I did here: https://community.checkpoint.com/t5/Southeast-US/HTTPS-Inspection-Best-Practices-South-March-2023/m-p/175649#M79
(Note, you will need to join the group in order to see the video and slides)

Perhaps that will be helpful.