Setup SSL Inspection on your GCC Firewall

Поділитися
Вставка
  • Опубліковано 8 вер 2024
  • Let's setup and test SSL inspection on our GCC!
    Join our community here: community.will...
    Hire us! williehowe.com
    Want to join us in learning how to deploy network services like this? Put your name on the training list now: williehowe.com...
    Name Cheap Affiliate Link: namecheap.pxf....
    Affiliate Links (I earn a small percentage of the sale if you use these links):
    UniFi Store General Link: store.ui.com/?...
    My AmazonLink: www.amazon.com...
    Netool: netool.io use code WHT to save at least 10%!
    Digital Ocean Affiliate Link: m.do.co/c/39aa...
    Patreon Link: / williehowe
    Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!
    Come back for the next video!
    Twitter - @WillieHowe
    TikTok - @whowe82
    SUBSCRIBE! THUMBS-UP! Comment and Share!

КОМЕНТАРІ • 17

  • @MrTimTech2022
    @MrTimTech2022 Місяць тому

    Thank you very much Willie, another useful and helpful video in your portfolio, looking forward to testing this myself soon too. Can't wait for the next vid in the GCC series. Thanks again❤😊

  • @JasonsLabVideos
    @JasonsLabVideos Місяць тому

    Thanks Willie !! This is awesome !

  • @dave56ize
    @dave56ize Місяць тому

    Good video! Thanks Willie

  • @djderekrock
    @djderekrock Місяць тому +1

    Very cool stuff Willie! I'd love to set something like this up in our sandbox environment to give our Junior analysts more hands on opportunities to learn SSL inspection.

  • @justinrutledge1221
    @justinrutledge1221 Місяць тому +1

    Very off topic, but what mechanical keyboard are you using Willie?

    • @WillieHowe
      @WillieHowe  27 днів тому

      Hyper X with Cherry Red switches.

  • @Practical-IT
    @Practical-IT Місяць тому

    This is very cool, and it looks like (after some configuration and testing) it might be a more robust solution than what we currently use at the library to filter "adult content" from the youth computers.
    Beyond the list of IP addresses that performed the search, are there any reporting capabilities available in the GCC products?

    • @WillieHowe
      @WillieHowe  Місяць тому +2

      @@Practical-IT There's real time email reports but we will dig more into reports!

    • @Practical-IT
      @Practical-IT Місяць тому +1

      @@WillieHowe Awesome! Thanks, Willie!

    • @JasonsLabVideos
      @JasonsLabVideos Місяць тому +1

      Grandstram FTW ! You will love their Hardware Jeremy !

  • @javitogm2102
    @javitogm2102 11 днів тому

    Hello, thanks for your videos! Sorry for my bad English. I am Argentine. I'm thinking about implementing it in schools, with different VLANs. (Separate for students, teachers and administrative staff). I have two questions. Can I Filter websites and APPs selectively by VLANs, IP segments or specific IP? How do I implement the loading of SSL certificates on devices that I do not have management? (for example, the students' personal notebooks are approximately 200, it would be very complicated to have to do it on all of them). Greetings

    • @WillieHowe
      @WillieHowe  11 днів тому +1

      @@javitogm2102 yes

    • @javitogm2102
      @javitogm2102 11 днів тому

      @@WillieHowe Ok, thank you very much for your quick response. and the second question?

    • @WillieHowe
      @WillieHowe  11 днів тому

      @@javitogm2102 You would have to give them the cert and tell them if they don't install it they won't haven't Internet.

    • @javitogm2102
      @javitogm2102 10 днів тому

      ​@@WillieHowe But it is very complicated and impractical for all users to know how to install a certificate. There may even be occasional connections from people who are not usually there. Can't it be transparent? simply that Windows or another operating system detects it as a valid certificate as usually happens when an SSL proxy is not used?

  • @jordantekelenburg
    @jordantekelenburg Місяць тому

    Did u get a unifi fortress Gateway??

    • @WillieHowe
      @WillieHowe  Місяць тому +1

      @@jordantekelenburg no