SSL inspection outbound Globally

[Scott_Paisley]

Hi

If we turn on outbound SSL inspection on a gateway in the US we need to export/import the cert from the gateway onto all the machines that might send traffic through that gateway.

If we also turn it on in Europe, can we share the US cert, or do we have to distribute the cert from each gateway Globally onto all machines that might pass through any of them?

Thanks

[PhoneBoy]

Any client that is having their traffic subject to HTTPS Inspection by a gateway will need to have the relevant CA key installed to them.
I believe you can use the same CA key for US/Europe gateways since the actual certificates generated as part of the HTTPS Inspection process are generated on the gateway itself as necessary.
Obviously, your HTTPS Inspection policy may have to be different in different locales due to local regulations.