Check Point R80.20 - Configuring Mirror and Decrypt in Smartconsole for One Virtual System

Mirror and Decrypt
Next Generation Security Gateway Guide R80.20 | 35
Configuring Mirror and Decrypt in SmartConsole for One Virtual
System
Workflow for one Virtual System:
1.
Enable the HTTPS Inspection in the object of the Virtual System (for decrypting the HTTPS
traffic).
2.
Configure the HTTPS Inspection Rule Base (for decrypting the HTTPS traffic).
3.
Add the designated physical interface in the object of the Virtual System.
4.
Activate the Mirror and Decrypt in the object of the Virtual System.
5.
Configure the Mirror and Decrypt rules in the Access Control Policy for the traffic you wish to
mirror and decrypt.
To enable the HTTPS Inspection:
Step
Description
1 In SmartConsole, from the left Navigation Panel, click Gateways & Servers.
2 Open the Virtual System object.
3 From the navigation tree, click HTTPS Inspection.
4 View and export the certificate.
5 Check Enable HTTPS Inspection.
6 Click OK.
To configure the HTTPS Inspection Rule Base:
Step
Description
1 In SmartConsole, from the left Navigation Panel, click Security Policies.
2 In the Shared Policies section, click HTTPS Inspection.
3 In the middle of the page, click Open HTTPS Inspection Policy in SmartDashboard.
The Legacy SmartDashboard opens.
4 Configure the HTTPS Inspection Rule Base.
For details, see
Configuring HTTPS Inspection (on page 199).
5 From the top toolbar, click Update (or press Ctrl+S) to save the changes in the
database.
6 Close the SmartDashboard.