Deploy HTTPS Inspection

[Luciano_Cirino]

Hello everyone,

I hope you're all doing well.

I'm looking to deploy HTTPS Inspection for a specific web application, but I'm unsure where to start. Could someone please assist me? I'm in need of guidance on this matter.

Thank you in advance.

[the_rock]

I would start below (last 3 links)

Andy

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecurityGateway_Guide/Topic...

[Matlu]

Hey, Bro.

HTTPS Inspection, it's for LAN to WAN traffic, right?

Or does it work in reverse as well?

Although if it were in reverse, to protect my LAN traffic, I think it would be better to use a WAF.

Greetings.

[the_rock]

Hey man,

So there is inbound and outbound https inspection. Most people would use outbound (LAN to WAN), but as you said, in reverse, you can also use WAF.

Andy

[the_rock]

Good doc given to me by Sales...I believe it was created by one of their diamond engineers.

[Wolfgang]

@Luciano_Cirino  if you want to secure  your web application  ( traffic from external to your web application host) as I understand you need inbound HTTPS inspection. Configuring Inbound HTTPS Inspection 

With HTTPS inspection enabled for access to your webserver you can use IPS, Antivirus,Antibot, Threat Emulation .. to inspect the traffic for malicious code. With this you get a WAF solution based on Check Point software. 
If your web application is cloud based you should use CloudGuard for Application Security as WAF.

And there are other vendors with specialized solutions for WAF.

[PhoneBoy]

In our local user groups, we do HTTPS Inspection Best Practice sessions.
You can see the last one I did here: https://community.checkpoint.com/t5/Southeast-US/HTTPS-Inspection-Best-Practices-South-March-2023/m-...
(Note, you will need to join the group in order to see the video and slides)

Perhaps that will be helpful.