Cisco WSA HTTPS Decryption

[Mandeep singh5]

Hello All,

I've gone through the following document and I just need to confirm that for HTTPS Decryption we need to first upload the Root certificate and key. After that, we need to generate a server certificate by generating a certificate and a key. The server certificate is going to be used for SSL decryption but for that first, we need to upload the root certificate.

Please confirm.

WSA Certificate Usage for HTTPS Decryption - Cisco

@amojarra @websecurity

[amojarra]

Hello @Mandeep singh5 

Kindly check this link : Configure Decryption Certificate in Secure Web Appliance - Cisco

I've tried to put everything there. 

and in general, WSA needs to trust the CA who is signing your certificate. so you need to add the CA certificate as a trusted certificate. then submit and Commit the changes.

then you can add the signed certificate.  

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++        If you find this answer helpful, please rate it as such      ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

[balaji.bandi]

good details steps (apart from suggested in the other post)

i followed below guide to setup :

https://www.cisco.com/c/dam/en/us/products/collateral/security/web-security-appliance/guide-c07-741372.pdf

good blog :

https://community.cisco.com/t5/security-videos/web-security-appliance-wsa-certificate-usage-https-decryption/ba-p/3098384