On the firewall go to Policy | Deep Packet Inspection | SSL Client Deployment | Certificate page, click on the (download) link to download the Default SonicWall DPI-SSL Certificate Authority (CA) Certificate. IMPORTING THE CERTIFICATE ON THE COMPUTERS:.Such trust can be established by having re-signing certificate imported into the browser's trusted CA list. To avoid certificate trust errors and to enable the re-signing certificate authority to successfully re-sign certificates, browsers would have to trust this certificate authority. You will be able to apply Security Services on the clear-text portion of the SSL encrypted payload passing through it.ĬAUTION: Before enabling SSL Client Inspection to make sure you have imported the client DPI-SSL Certificate in all the computers otherwise the network may be impacted as all HTTPS websites will start showing a Certificate Error. Once DPI-SSL Client Inspection is enabled, SonicWall will seamlessly and transparently decrypt all SSL traffic passing through it. Navigate to Policy| Deep Packet Inspection| On the Client SSL page, check Enable SSL Client Inspection.In the case of Chrome and IE, this is a part of the Windows Certificate Store, however for Firefox, this must be added manually. This certificate should be added to the browser to eliminate certificate trust errors. The below resolution is for customers using SonicOS 7.X firmware.Ĭlient DPI-SSL deployment scenario typically is used to inspect HTTPS traffic when clients on the LAN browse content located on the WAN.Ī commonly used certificate is the Default SonicWall DPI-SSL Certificate Authority (CA) Certificate. This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. Content Filtering Client Control access to unwanted and unsecure web content.Capture Client Stop advanced threats and rollback the damage caused by malware.Cloud Firewall (NS v) Next-generation firewall capabilities in the cloud.Cloud App Security Visibility and security for Cloud Apps.Email Security Protect against today’s advanced email threats.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |