What is SSL inspection? Why do we use SSL inspection?

This week I'm going to show you a very affordable SSL inspecting firewall -- before we get to that we need to talk about SSL inspection and what it does. SSL inspection essentially allows us to intercept traffic in our network - break it apart, look at the traffic, repackage it, and send it to the host -- all without the host knowing. SSL inspection takes our tools like DNS filtering and IDS/IPS and makes them even more powerful! With great power comes great responsibility!

Affiliate Links (I earn a small percentage of the sale if you use these links):

Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!

Come back for the next video!
Twitter - @WillieHowe
TikTok - @whowe82

SUBSCRIBE! THUMBS-UP! Comment and Share!

[JosephJohnson-sqbu]

Set this up for Palo Alto, was quite the learning process, but I agree. Was intimidating at first but got the hang of it

[jfred]

Thanks for the video. I am interested to hear your plan to deal with tls1.3 and also certificate pinning on mobile devices.

[aopen]

Is this the same as HTTPS filtering in Adguard on Android? They require the user install a CA from Adguard and inspect and filter ads?

[ZorgFS]

true, that was like that in good old times of SQUID and such.
now with modern certificates and techs like Certificate Pinning, OCSP Stapling all that rendered obsolete and in majority cases will not work, unless target website doesn't use any of these, which for financial organizations for example is never the case nowadays. All that was specifically designed to mitigate MITM attack what basically any SSL inspections is.

[rcbilly]

I like to know more about cyber liability 😊