cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
215
Views
0
Helpful
3
Replies
Highlighted
Beginner

using WSA generated CSR to get sign via Public CA (GoDaddy) for HTTPS Decryption ?

Hi Team,

 

can we use WSA own self generated CSR to get sign via Public CA (GoDaddy) and use it for all Users/Contractors/Mobile devices ?

we dont have any Internal CA and want decryption for all Users Domain/Guest 

 

Thanks

3 REPLIES 3
VIP Advocate RJI VIP Advocate
VIP Advocate

Re: using WSA generated CSR to get sign via Public CA (GoDaddy) for HTTPS Decryption ?

Hi,
No, that is not possible. When doing HTTPS/SSL Decryption, the certificate used must be a "Subordinate CA" type certificate. This certificate isn't your typical certificate and a public CA like GoDaddy isn't going to issue one.

HTH
Beginner

Re: using WSA generated CSR to get sign via Public CA (GoDaddy) for HTTPS Decryption ?

Hi RJI,

 

thanks for the comments

 

then how can we achieve Decryption for Guest/Contractor without getting any certificate error. we want all Guest/Contractor traffic via Proxy only.

 

Thanks 

Collaborator

Re: using WSA generated CSR to get sign via Public CA (GoDaddy) for HTTPS Decryption ?

You have to make the cert available for them to install or not decrypt their traffic.