You setup a proxy firewall in your organization to restrict

You setup a proxy firewall in your organization to restrict the open access computers previously had to the Internet. Explain why it is necessary to modify the HTTPS certificate configuration on your organization’s computers to fully implement this change and what will happen if this is not done.

Solution

Dear Student,

A proxy server is a server which act as an intermediatery between client and the server.A proxy can keep the internal network structure of a company secret by using network address translation, which can help the security of the internal network.

It is necessary to modify the https certificate configuration on the organizations computers while using proxy firewall because many web sites use both the HTTP and HTTPS protocols to send information to users. While HTTP traffic can be examined easily, HTTPS traffic is encrypted. To examine HTTPS traffic requested by a user on your network, you must configure your Firebox or XTM device to decrypt the information and then encrypt it with a certificate signed by a CA that each network client trusts. So we have to modify the HTTPS certificates on all computers on the network.

So what a HTTPS certificate does..?

When a computer in a network scans an HTTPS connection, the HTTPS Proxy intercepts the HTTPS request, and initiates its own connection to the destination HTTPS server. The HTTPS Proxy on your computer presents its own resigning certificate to the originating client and connects with the destination HTTPS server on the client\'s behalf.

If we do not modify the https setting then client will not be able to connect with the server.we must modify the https certificate on each computer on the network for connections to be successful.

*****Dear Student Kindly provide your valubale feedback if you are satisfied with the answer.*******