Hi everyone,
I have some questions about "SSL inspection".
I have a couple of servers in my DMZ zone that they serve mostly HTTPS service to clients. HTTP and HTTPS traffic first come to "firepower" and then go through web application firewall "WAF".
SSL traffic's certificate is applied in the WAF and WAF is managing the certificate for HTTPS services.
And due to threats detection, WAF decrypts the SSL traffics.
And now I want to configure an SSL inspection in the FTD that traffic first goes through it.
Should I use the same WAF certificate that it is using for HTTPS service and it is a valid certificate in the FTD firewall?
Does it have effects on WAF function?
Does anyone do this scenario before?