This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help
Julio_Rugel
Participant
‎2017-06-28 01:55 PM

What is the best option to integrate the websense and chekpoint certificates for Emulation HTTPS?

I need to enable https emulation but all users are browsing through a proxy server (websense). The proxy server also has ssl inspection enabled and the websense certificate is deployed on all my computers.

What is the best option to integrate the websense and chekpoint certificate for Emulation HTTPS?

I upload the certificate proxy server as TC did not work, users can not surf the Internet, an error trusted certificate is obtained.

Preview file
163 KB
2 Replies
PhoneBoy
Admin
Admin
‎2017-06-28 09:59 PM

Assuming it's web browser > Websense > Check Point > Internet, you will need to configure the Websense proxy to trust the CA certificate used by the Check Point device.

Note that this "double SSL inspection" will add additional latency and may create additional compatibility issues.

Norbert_Bohusch
Advisor
‎2017-06-30 12:04 AM

If the Websense supports being an ICAP client, maybe the better option would be to work with Check Point as ICAP server (sk111306). Then there would not be a need to do double inspection!