Skip to main content
antonio_image
New Member
February 1, 2016
Question

Use fortigate packet inspection to decrypt and send decripted data to Fireeye

  • February 1, 2016
  • 1 reply
  • 4905 views

Hi all.

 

it's possible to reach how described in subject?

 

i've to use Fortigate to decrypt https data and send decrypted data to FireEye to analyze and than re-encrypt.

 

"client" <--> lan <--> fortinet <--> decrypted data <--> fireeye <--> encrypted data <--> internet.

 

 

how can i reach this?

 

thanks

    1 reply

    ede_pfau
    SuperUser
    SuperUser
    February 1, 2016

    Isn't that what WCCP is for? Check that in the Handbook.

    emnoc
    New Member
    February 1, 2016

    FWIW: FEYE has a ssl decryptor device, this is what you want to use.