Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working With Encrypted Data > Initial SSL configuration tasks
Initial SSL configuration tasks
Help | Content Gateway | Version 8.1.x
For inbound (client to Content Gateway) traffic, perform these steps to prepare for supporting HTTPS traffic through Content Gateway:
1.
Create an internal root CA (certificate authority). In order to sign SSL traffic, Content Gateway requires an internal SSL Certificate Authority that has the ability to sign SSL certificates. This is for traffic between the browser and Content Gateway. See Internal Root CA.
2.
Add this CA to the certificate tree. Servers, such as destination servers, check this tree to ensure that they can trust users because they have certificates from an authority listed here. The certificates listed on the certificate tree are certificate authorities you empower (trust) to verify the validity of individual websites. Any site signed by a certificate authority in the certificate tree with the "allow" status is allowed through Content Gateway. See Managing certificates
3.
Customize pages that browser users will see. See Customizing SSL connection failure messages. Among the pages that can be customized are a connect failure and certificate verification failure page.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working With Encrypted Data > Initial SSL configuration tasks
Copyright 2016 Forcepoint LLC. All rights reserved.