ProxySG & Advanced Secure Gateway

 View Only

  • 1.  Having SSL offloaded to an SSL visibility appliance

    Posted Jul 23, 2017 06:39 PM

    Hi;

    I undertand that starting from version 6.7.1.1 of SGOS, you can have the SSL Visitbility appliance in active-inline mode sending dycrypted SSL traffic to a proxy SG device. My question is. Is there any literature about this and what is the software version of the SSL visibility appliance for this configuraiton to work.

     

     

    Kindly

    Wasfi

     



  • 2.  RE: Having SSL offloaded to an SSL visibility appliance

    Broadcom Employee
    Posted Jul 23, 2017 11:26 PM

    does this help?

    https://support.symantec.com/en_US/article.PROD1555.html

    SSLV Offload

    In this release, you can connect one or more ProxySG appliances to an SSL Visibility appliance running version 4.0.1 to offload SSL/TLS traffic processing. Configuring SSLV offload requires that you identify the ProxySG and SSLV appliances to each other using their respective serial numbers.

    Configure SSLV offload on the ProxySG appliance using one of the following methods:

    • Managing SSLV appliances in the Management Console (Configuration > SSL > SSLV Offload)
    • Issuing the #(config ssl)sslv-offload command

    You must also add ProxySG appliance information to the SSLV appliance(s). 

     

    explaination on SSl offload config

    https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/DOCUMENTATION/9000/DOC9832/en_US/Reverse_Proxy_with_SSL.b.pdf?__gda__=1501008628_6c6308a149563b13f0a7363d0b1f831c

     



  • 3.  RE: Having SSL offloaded to an SSL visibility appliance

    Posted Jul 24, 2017 01:15 AM

    Are there any plans to have SSL visibility integrate with 3rd party proxy devices.

     

    Kindly

    Wasfi