HTTPS Inspection outbound certificate problem

[Michael_Horne]

HI,

I have a .p12 certificate that has been generated for the FW cluster with the full chain of CAs included.

When I use this for the platform portal I have no issues and when I view the certificate I see the full path:

When I use the same .p12 certificate for HTTPS inspection and view the certificate There is an issue:

Is there anything specific about HTTPS inspection that could be causing this issue? It is exactly the same .p12 file that is being used for both.

Many thanks,

[Marco_Valenti · Accepted solution]

If I understand correct you are trying to use a certificate that was issued for the security gateway itself from a CA in https inspection.

The certificate that need to be used for https inspection should be class CA or sub CA or otherwise you need to generate a certificate issued from the check point internal certificate itself and then distribute it to the client and use that certificate in the outbound inspection this can be done from the https section of the gateway

[Michael_Horne]

Hi,

yes our mistake on the type of configuration.