The Security Gateway acts as an intermediary between the client computer and the secure web site. Outbound HTTPS inspection - To protect an organization from malicious traffic being sent by an internal client to a destination outside of the organization.Inbound HTTPS inspection - To protect internal servers from malicious requests originating from the internet or an external network.The SSL protocol is widely implemented in public resources that include: banking, web mail, user forums, and corporate web resources. This makes the company vulnerable to security attacks and sensitive data leakage. Security Gateways without HTTPS Inspection are unaware of the content passed through the SSL encrypted tunnel. One example of a threat is when an employee uses HTTPS (SSL based) to connect from the corporate network to internet web servers. It can hide illegal user activity and malicious traffic from the content inspection of Security Gateways. However, SSL has a potential security gap. It supplies data privacy and integrity by encrypting the traffic, based on standard encryption ciphers. SSL secures communication between internet browser clients and web servers. You can enable HTTPS traffic inspection on Security Gateways to inspect traffic that is encrypted by the Secure Sockets Layer (SSL) protocol. You can use the HTTPS Inspection feature to unencrypt traffic and let Threat Prevention Software Blades give protections against advanced threats, bots, and other malware. Using Threat Prevention with HTTPS Traffic In This Section:

Download checkpoint smartdashboard r77