This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL/TLS Offload

If the virtual webserver uses https, and the real webserver http, the WAF offloads the SSL/TLS. But what happpens if you configure the real webserver with https as well? Does the WAF just act as a passthrough, sending everything to the real webserver, or does it still offload by decrypting the initial data between client and UTM and then re-encrypt between UTM and real webserver?


This thread was automatically locked due to age.
Parents
  • If the Real Server also is configured for HTTPS, it's not offloaded at all.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • If the Real Server also is configured for HTTPS, it's not offloaded at all.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data