Usage of HSM

[epacke]

Hi!

Is it possible to store the keys for intercepting TLS sessions in the Web Filter with an HSM device? I looked at the manuals and only found references to the FortiADC.

If it is possible would you mind answering these questions?

[ul]

Is the key transaction made once per TLS session, or at machine startup?

Would you recommend against having a HSM centrally and connecting to it over the internet?[/ul]

Is there any other ways to protect the keys in remote locations?

Any reply is most appreciated!

Kind regards,

Patrik

[Gebster]

Yes, see Securosys HSM or the Securosys CloudsHSM:

https://docs.securosys.com/fortigate/overview