Check Point Endpoint SSL Certificate Change impacts

[TonyStark]

Hello!

We want to change our Endpoint SSL-Certificate on our management server. We know how to do it but we don't know if there is any kind of impact to the client connections. So will the  clients still be connected to the Endpoint-server or will they lose there connection due to a change of the fingerprint or similar?

[_Val_]

Can you elaborate please?

[TonyStark]

We are running a Endpoint-Server with certificates signed by a internal CA. Nessus-scans report that the certificate is self-signed. Now we want to implement a CSR as done here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

The certificate is backed up and it seems to be the right "tutorial" thats what we need. But we also need to know if Clients will stay connected to the Endpoint-Server after implementing this or if they lose connection due to whatever reason there could be

[_Val_]

Firstly, you can ignore Nessus results, self-signed here does not present a security risk of any kind. 
Secondly, you will have a wide endpoint impact, they will not be able to reconnect, until each client accepts the new cert, or is fully redeployed.

[ealtun]

Hi,

firstly you need to create certificate and import for endpoint client .Than you need to create ssl inspection certificate and import to ssl inspection blade.Thats generel information for ssl inspection.

congratulations