![]() ![]() Configure DPI-SSL/TLS for Clients for visibility into encrypted traffic and use Capture Client Trusted Certificate Policies to deploy the certificates.Configure Endpoint Security Rules to enforce endpoints - if necessary create multiple profiles and rules to enforce differently for different endpoints in different Zones.Configure the Endpoint Security Enforcement service including enabling User SSO for User Visibility and enabling Network Threat Alerts.Sharing licenses activates the Enforcement service on the firewalls which can now be configured as follows: Administrators can choose to share the licenses with some/all of the firewalls - depending on where they want to enforce the use of Capture Client on endpoints.Ģ. Share the Capture Client licenses with your firewalls - this requires that the Capture Client product and the firewalls be registered in the same MySonicWall tenant. With Capture Client Trusted Certificate Policies, administrators can enforce the installation of SSL certificates that will be used to inspect encrypted traffic to/from endpoints using the DPI-SSL feature.Įnabling the integration and using these features requires some action from the administrator:ġ. Enabling DPI-SSL – Certificate Provisioning can become a very cumbersome task and can hamper operational efficiency.Network Threat Alerts – Endpoints running Capture Client that trigger threat detections on the firewall by the GAV, IPS, App Control or Botnet engines will see a notification on their endpoint.User Visibility and Single Sign-On (SSO) – IP addresses of endpoints behind the firewall are automatically mapped to the user logged into the endpoints at the time which is used for user activity reporting as well as single-sign on (SSO) to the firewall for user-based access policies.Users of these endpoints will be prompted to download and install Capture Client via a Block page in their browser to regain connectivity to the Internet. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |