HTTPS

Support

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Configuration Options > Protocols > HTTPS

HTTPS

Help | Content Gateway | Version 7.7.3

Use the Configure > Protocols > HTTPS page to specify:

Inbound and outbound HTTPS ports

Skype tunneling (explicit proxy only)

Tunneling when an SSL connection request gives an unknown protocol error


Option	Description
	General
HTTPS Proxy Server Port	Specifies the port that Content Gateway uses when acting as a Web proxy server for HTTPS traffic. This is also known as the SSL Inbound Port.
SSL Outbound Port	Specifies the port HTTPS traffic goes to for re-encryption before being sent to its destination. The default is 8090.
Tunnel Skype	Enables/disables the tunneling of Skype traffic when HTTPS (SSL Manager) is enabled and Content Gateway is an explicit proxy. To complete the configuration, you must ensure that all users who are allowed to use Skype have a Filtering policy that allows internet telephony. This is required regardless of whether Skype is used with SSL enabled or not. Also, if Skype is not prevented, after the handshake it will route traffic over a non-HTTP port. To force Skype traffic to go through Content Gateway, a GPO should be used, as described in the Skype IT Administrators Guide. Note: This option is not necessary if SSL is not enabled. Note: This option is not valid when Content Gateway is a transparent proxy.
Tunnel Unknown Protocols	Enables/disables tunneling of HTTPS requests when the SSL handshake results in an unknown protocol error. Tunneled connections are not decrypted or inspected. When Content Gateway is an explicit proxy, a URL lookup is performed and policy is applied before the SSL connection request is made. Therefore, tunneled transactions appear in the Web Security transaction log. When Content Gateway is a transparent proxy, the URL lookup is not possible and tunneled transactions are not logged. This is because an initial connection is required to get the Common Name from the SSL certificate. It is used for the URL lookup. If the connection handshake fails and this option is enabled, the connection is tunneled without the proxy being aware of it.

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Configuration Options > Protocols > HTTPS