Content Filtering and Optimizing Scans
216
ProSecure Unified Threat Management (UTM) Appliance
Figure 119.
However, even when a certificate is trusted or still valid, or when the name of a certificate
does match the name of the website, a security alert message still displays when a user who
is connected to the UTM visits an HTTPS site. The appearance of this security alert message
is expected behavior because the HTTPS client receives a certificate from the UTM instead
of directly from the HTTPS server. If you want to prevent this security alert message from
displaying, install a root certificate on the client PC. The root certificate can be downloaded
from the UTM’s Manager Login screen (see Figure 19 on page 40).
If client authentication is required, the UTM might not be able to scan the HTTPS traffic
because of the nature of SSL. SSL has two parts—client and server authentication. HTTPS
server authentication occurs with every HTTPS request, but HTTPS client authentication is
not mandatory, and rarely occurs. Therefore it is of less importance whether the HTTPS
request comes from the UTM or from the real HTTPS client.
However, certain HTTPS servers do require HTTPS client certificate authentication for every
HTTPS request. Because of the design of SSL, the HTTPS client needs to present its own
certificate in this situation rather than using the one from the UTM, preventing the UTM from
scanning the HTTPS traffic. For information about certificates, see Manage Digital
Certificates for HTTPS Scans on page 218.
You can specify trusted hosts for which the UTM bypasses HTTPS traffic scanning. For more
information, see Specify Trusted Hosts on page 223.
 To configure the HTTPS scan settings:
1. Select Application Security > SSL Settings > SSL Settings. The SSL Settings screen
displays:
To Next Page
Loading...
Need help?
General