topic Re: Using 3rd Party Certificate for HTTPS Inspection in General Topics

Using 3rd Party Certificate for HTTPS Inspection

Marvin_Castillo — Wed, 20 Feb 2019 03:27:53 GMT

Hi Guys,

May I ask for your help on how can we make a 3rd Party certificate to be used on HTTPS Inspection instead of the self signed?

Re: Using 3rd Party Certificate for HTTPS Inspection

abihsot__ — Wed, 20 Feb 2019 07:06:41 GMT

Hi,

yes, you have an option either to create or import certificate. Just make sure:

* your certificate is trusted by clients. Otherwise you'll get warnings for every page you visit.

* you have proper certificate (it is able to issue certificates - subordinate if I correctly remember the name)

Re: Using 3rd Party Certificate for HTTPS Inspection

Benedikt_Weissl — Wed, 20 Feb 2019 11:06:59 GMT

Hi,

edit the firewallobject -> select "HTTPS Inspection" and click on the "Import" hyperlink, then follow the wizard.
Keep the points abihsot mentioned in mind and additionally import the certificate with the full chain (root CA etc. included).

Re: Using 3rd Party Certificate for HTTPS Inspection

Maarten_Sjouw — Wed, 20 Feb 2019 12:53:28 GMT

For HTTPS inspection, you need a Certificate Authority not a certificate.

You will not be able to find a 3rd party supplier that will supply you with a CA without paying a huge amount of money as it will allow you to generate your own trusted certificates.

Re: Using 3rd Party Certificate for HTTPS Inspection

Alessandro_Marr — Thu, 21 Feb 2019 02:19:32 GMT

Use self signed certificate, it´s easy and works fine.

Re: Using 3rd Party Certificate for HTTPS Inspection

PhoneBoy — Sat, 23 Feb 2019 04:52:18 GMT

It's against the terms of service of all major CAS to use their certificates for HTTPS Inspection purposes.