Enabling SSL decryption

Defining Web Policies > SSL Decryption tab > Enabling SSL decryption

TRITON Cloud Security Help | Cloud Web and Email Security Solutions

SSL (Secure Sockets Layer) is the industry standard for transmitting secure data over the Internet. It is based on a system of trusted certificates issued by certificate authorities and recognized by servers.

When you enable SSL decryption for Cloud Web Security users, SSL-encrypted traffic is decrypted, inspected, and then re-encrypted before it is sent to its destination. This enables the cloud proxy to serve the correct notification page to the user – for example, a block page if the SSL site is in a category that the end user is prevented from accessing, or the Pre-logon welcome page for authentication.

To implement SSL decryption for your end users, you need a root certificate on each client machine that acts as a Certificate Authority for SSL requests to the cloud proxy.

To install the root certificate for your end users and enable notification pages for SSL sites:

1.	On the SSL Decryption tab, click Websense Root Certificate and download the certificate to a location on your network. You can then deploy the certificate manually, using your preferred distribution method