topic Re: HTTPS Inspection outbound certificate problem in General Topics

HTTPS Inspection outbound certificate problem

Michael_Horne — Thu, 01 Mar 2018 13:22:34 GMT

HI,

I have a .p12 certificate that has been generated for the FW cluster with the full chain of CAs included.

When I use this for the platform portal I have no issues and when I view the certificate I see the full path:

When I use the same .p12 certificate for HTTPS inspection and view the certificate There is an issue:

Is there anything specific about HTTPS inspection that could be causing this issue? It is exactly the same .p12 file that is being used for both.

Many thanks,

Re: HTTPS Inspection outbound certificate problem

Marco_Valenti — Thu, 01 Mar 2018 13:39:50 GMT

If I understand correct you are trying to use a certificate that was issued for the security gateway itself from a CA in https inspection.

The certificate that need to be used for https inspection should be class CA or sub CA or otherwise you need to generate a certificate issued from the check point internal certificate itself and then distribute it to the client and use that certificate in the outbound inspection this can be done from the https section of the gateway

Re: HTTPS Inspection outbound certificate problem

Michael_Horne — Thu, 01 Mar 2018 17:11:25 GMT

Hi,

yes our mistake on the type of configuration.