i have used ssl decryption on firewalls for url filtering and they are where users from inside wants to access internet resources, in this case we need to export a certificate and then install it to each client machine of the organization.
If the flow is opposite where a server is inside an organization and users from internet wants to access it. We need to enable some kind of protection like IPS or Malware on that server using firepower, how will this work. If i configure a ssl policy with this then the public users need to have the firepower certificate and since the user base is dynamic it is almost impossible to do this. Is there a way to still inspect SSL traffic where internet users are accessing our server.
If i am not mistaken this can be done by web application firewalls using ssl offloading technique but can this be done using asa firepower services?
