Hey,
I am deploying a Check Point cluster in VSX VSLS mode for an MSSP solution, which we're offering to our customers. Every virtual-system connects to the customer network via a site-to-site VPN. And I have enabled blades like APPI, URLF, TE & TEX, SSL_INSPECT, IPS, AV & ABOT. I would like to inspect a certain amount of customer traffic using HTTPS Inspection and gradually tweak this setting after observing the resource utilization over a period of time. What is the golden standard for deploying HTTPS Inspection? What web categories and sites should I always opt to inspect, keeping in mind the security posture?
Since every customer would have a different environment, and I don't want to have a generic solution that would fit everyone. But I would like to understand where I can start to begin with?
Moreover, is there a utility out there that I can put to use to measure how efficiently my gateway is inspecting all this traffic?
Thanks!
Abdul Tayyeb R.
