Versions Compared

Old Version 5

changes.mady.by.user Jean-luc KRIKER

Saved on

compared with

New Version Current

changes.mady.by.user Jean-luc KRIKER

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

SSL proxy

SSL forward proxy- Protect the client  ( Outgoing traffic to the Internet )

Reverse Proxy- Protect the web server ( Incoming traffic from the Internet )


Document:   https://www.juniper.net/documentation/us/en/software/junos/application-identification/topics/topic-map/security-ssl-proxy.html


provides a gateway between users and the internet

web filtering, DNS filtering, data loss prevention, antivirus, intrusion prevention, and advanced threat protection


Types of Proxy Servershttps://www.fortinet.com/resources/cyberglossary/proxy-server#:~:text=A%20proxy%20server%20is%20a,web%20pages%20they%20visit%20online.





Image Added

SSL relies on certificates and private-public key exchange pairs to provide the secure communication


https://www.juniper.net/documentation/en_US/junos/topics/concept/idp-ssl-overview.html

...

SSL VPN (NCP client) = already supported
SSL Forward Proxy = 18.1
SSL Reverse Proxy = not supported (what is the use case?)
Sky ATP = 18.2 (likely be TRD)

  • SSL Proxy is not supported on SRX300 and SRX320 series devices.  ( 4.0.2 )
  • **Note: On SRX300 and SRX320 devices, SSL forward proxy is supported from Junos 18.1R1
  • However when TLS V1.3 becomes popular this feature won’t work anymore by design.


Selective SSL-proxy basen on custom URL is supported since Junos 17.4

...