SSL Inspector - Revision history

Græmer at 18:35, 3 May 2022

2022-05-03T18:35:21Z

2021-05-21T15:44:39Z

Download Root Certificate Authority

← Older revision		Revision as of 15:44, 21 May 2021
Line 140:		Line 140:
	== Configuration ==		== Configuration ==

	=== Download Root Certificate ~~Authority~~ ===		=== Download Root Certificate ===

	As described above, client computers and devices on your network need to be configured to trust the		As described above, client computers and devices on your network need to be configured to trust the

2021-05-21T15:44:15Z

Download Root Certificate

← Older revision		Revision as of 15:44, 21 May 2021
Line 140:		Line 140:
	== Configuration ==		== Configuration ==

	=== Download Root Certificate ===		=== Download Root Certificate Authority ===

	As described above, client computers and devices on your network need to be configured to trust the		As described above, client computers and devices on your network need to be configured to trust the

2021-05-21T15:43:37Z

Opera on Microsoft Windows

← Older revision		Revision as of 15:43, 21 May 2021
Line 106:		Line 106:

	# Log into the Untangle server running SSL Inspector.		# Log into the Untangle server running SSL Inspector.
	# Go to ~~Settings/Configuration~~ and download the certificate using the "Download Root Certificate" button.		# Go to '''Config > Administration > Certificates''' and download the certificate using the "Download Root Certificate Authority (CA)" button.
	# Copy the root_authority.crt you just downloaded to the Windows client computer.		# Copy the root_authority.crt you just downloaded to the Windows client computer.
	# Launch Opera		# Launch Opera

2021-05-21T15:43:17Z

Firefox on Microsoft Windows

← Older revision		Revision as of 15:43, 21 May 2021
Line 96:		Line 96:

	# Log into the Untangle server running SSL Inspector.		# Log into the Untangle server running SSL Inspector.
	# Go to ~~Settings/Configuration~~ and download the certificate using the "Download Root Certificate" button.		# Go to '''Config > Administration > Certificates''' and download the certificate using the "Download Root Certificate Authority (CA)" button.
	# Copy the root_authority.crt you just downloaded to the Windows client computer.		# Copy the root_authority.crt you just downloaded to the Windows client computer.
	# Launch Firefox		# Launch Firefox
	# From the Tools menu, go to Options -> ~~Advanced -> Encryption -> View Certificates -> Authorities (On version 41+ of Firefox From the Tools menu, go to Options -> Advanced -> View Certificates)~~		# From the Tools menu, go to '''Options -> Privacy & Security'''.
	# Click the Import button and select the root_authority.crt file.		# Click the Import button and select the root_authority.crt file.
	# Enable the "Trust this CA to identify websites" checkbox and click the OK button.		# Enable the "Trust this CA to identify websites" checkbox and click the OK button.

2021-05-21T15:42:20Z

Internet Explorer or Google Chrome on Microsoft Windows

← Older revision		Revision as of 15:42, 21 May 2021
Line 86:		Line 86:

	# Log into the Untangle server running SSL Inspector.		# Log into the Untangle server running SSL Inspector.
	# Go to ~~[B]~~Config > Administration > Certificates~~[/B]~~ and download the certificate using the "Download Root Certificate Authority (CA)" button.		# Go to '''Config > Administration > Certificates''' and download the certificate using the "Download Root Certificate Authority (CA)" button.
	# Copy the root_authority.crt you just downloaded to the Windows client computer.		# Copy the root_authority.crt you just downloaded to the Windows client computer.
	# From a command prompt, or from Start/Run, run the command "certmgr.msc".		# From a command prompt, or from Start/Run, run the command "certmgr.msc".

2021-05-21T15:41:52Z

Internet Explorer or Google Chrome on Microsoft Windows

← Older revision		Revision as of 15:41, 21 May 2021
Line 86:		Line 86:

	# Log into the Untangle server running SSL Inspector.		# Log into the Untangle server running SSL Inspector.
	# Go to ~~Settings~~/~~Configuration~~ and download the certificate using the "Download Root Certificate" button.		# Go to [B]Config > Administration > Certificates[/B] and download the certificate using the "Download Root Certificate Authority (CA)" button.
	# Copy the root_authority.crt you just downloaded to the Windows client computer.		# Copy the root_authority.crt you just downloaded to the Windows client computer.
	# From a command prompt, or from Start/Run, run the command "certmgr.msc".		# From a command prompt, or from Start/Run, run the command "certmgr.msc".

2021-01-06T14:44:23Z

Client Configuration

← Older revision		Revision as of 14:44, 6 January 2021
Line 77:		Line 77:
	Another way to download the root certificate is to simply access a special URL using the IP address of the Untangle server:		Another way to download the root certificate is to simply access a special URL using the IP address of the Untangle server:

	http://~~0.0.0.0~~/cert		http://yourserver/cert

	Simply replace 0.0.0.0 with the IP address of your Untangle server. This method is especially useful when using mobile devices. For example, accessing this URL on an iPad or iPhone will download and display the certificate, and provide an option to install and trust the certificate directly on the device.		Simply replace 0.0.0.0 with the IP address of your Untangle server. This method is especially useful when using mobile devices. For example, accessing this URL on an iPad or iPhone will download and display the certificate, and provide an option to install and trust the certificate directly on the device.

2021-01-06T14:43:42Z

Download Root Certificate

← Older revision		Revision as of 14:43, 6 January 2021
Line 148:		Line 148:
	from the [[Config]] > [[Administration]] > [[Certificates]] page. The download link is included		from the [[Config]] > [[Administration]] > [[Certificates]] page. The download link is included
	on the SSL Inspector Configuration page for convenience.		on the SSL Inspector Configuration page for convenience.

			Alternatively, you can download the certificate from a client system by navigating to http://yourserver/cert.

	=== Enable SMTPS Traffic Processing ===		=== Enable SMTPS Traffic Processing ===

2020-11-18T18:01:34Z

Client/Server Connection Protocols

← Older revision		Revision as of 18:01, 18 November 2020
Line 174:		Line 174:
	* TLSv1 - This is an older protocol that has some known weaknesses. These can be mitigated if the other side of the connection forces certain secure ciphers to be used. However, since this can't be guaranteed, best practice is to disable this protocol unless it is required to support connections with legacy clients or servers.		* TLSv1 - This is an older protocol that has some known weaknesses. These can be mitigated if the other side of the connection forces certain secure ciphers to be used. However, since this can't be guaranteed, best practice is to disable this protocol unless it is required to support connections with legacy clients or servers.

	* TLSv1.1 - This is a ~~more~~ modern protocol that is generally regarded as secure.		* TLSv1.1 - This is a modern protocol that is generally regarded as secure and is used as a fallback for 1.2 or in older browsers.

	* TLSv1.2 - This is the most recent version of the TLS protocol.		* TLSv1.2 - This is the most common and recommended TLS version.

			* TLSv1.3 - This is the most recent version of the TLS protocol and offers the highest security but may have issues with some websites.

	=== Trust All Server Certificates ===		=== Trust All Server Certificates ===