topic SSL Decryption Placement in Network Security

SSL Decryption Placement

fatalXerror — Wed, 03 Mar 2021 04:15:24 GMT

Hi Guys,

I am just wondering where is the best placement for a firewall doing an SSL decryption? If I have a multi-tier firewall in the network, tier-1 which is facing outside network will definitely needs SSL decryption but how about internal firewall or DMZ side firewall?

Thanks

Re: SSL Decryption Placement

balaji.bandi — Wed, 03 Mar 2021 08:03:42 GMT

if the perimeter going via DMZ all the connection out, then DMZ is the right place. if not outside interface.

Re: SSL Decryption Placement

fatalXerror — Wed, 03 Mar 2021 08:44:45 GMT

Hi @balaji.bandi , is this means that no need to enable the SSL decryption for the internal firewall? Thanks

Re: SSL Decryption Placement

balaji.bandi — Wed, 03 Mar 2021 09:34:40 GMT

depends on the network as you said you have multi-tier FW, so I expect or suggest this to be the perimeter where it exits to the Internet oor internet edge FW.