Adding Trsuted Root CA to GAIA to allow access to Internet

[DR_74]

Hello,

My Management Server is behind a Firewall/Proxy inspecting HTTPS, therefore the management server can not access Checkpoint Services to update IPS, Jumbo Hotfix....

Is there a way to add the SSL certificate of the Proxy on the Management server so that it will trust this proxy and access Internet?

Kind regards

Thanks

[G_W_Albrecht]

Why not exclude the SMS by source IP from Proxy inspecting HTTPS ? Makes not much sense inspecting IPS updates or Jumbo Hotfixes anyway...

[DR_74]

Of course it is a possibility but it is just to know if we can do this.

[G_W_Albrecht]

You better not do that - but the how to is found here: The ICA Management Tool - Security Management Administration Guide R80.20 p.277.

[Tsvika_Gilman]

You have written very interesting articles here in Checkmates forum.

Thank you
Tsvika