What is SSL inspection? Why do we use SSL inspection?

This week I'm going to show you a very affordable SSL inspecting firewall -- before we get to that we need to talk about SSL inspection and what it does. SSL inspection essentially allows us to intercept traffic in our network - break it apart, look at the traffic, repackage it, and send it to the host -- all without the host knowing. SSL inspection takes our tools like DNS filtering and IDS/IPS and makes them even more powerful! With great power comes great responsibility!
Join our community here: community.will...
Hire us! williehowe.com
Want to join us in learning how to deploy network services like this? Put your name on the training list now: williehowe.com...
Name Cheap Affiliate Link: namecheap.pxf....
Affiliate Links (I earn a small percentage of the sale if you use these links):
UniFi Store General Link: store.ui.com/?...
My AmazonLink: www.amazon.com...
Netool: netool.io use code WHT to save at least 10%!
Digital Ocean Affiliate Link: m.do.co/c/39aa...
Patreon Link: / williehowe
Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!
Come back for the next video!
Twitter - @WillieHowe
TikTok - @whowe82
SUBSCRIBE! THUMBS-UP! Comment and Share!

[@JosephJohnson-sq4bu]

Set this up for Palo Alto, was quite the learning process, but I agree. Was intimidating at first but got the hang of it

[@lafk_pl]

Willie, thank you for this. To improve I'd consider: 1. Adding two static images as help for explanations, gesturing in the air does help but images ARE better 2. Adding chapters 3. Adding two examples of solutions to learn more on real solutions/examples (perhaps done in last minute of the vid, have not seen it yet)

[@jfred1989]

Thanks for the video. I am interested to hear your plan to deal with tls1.3 and also certificate pinning on mobile devices.

[@aopen130]

Is this the same as HTTPS filtering in Adguard on Android? They require the user install a CA from Adguard and inspect and filter ads?

[@ZorgFS]

true, that was like that in good old times of SQUID and such. now with modern certificates and techs like Certificate Pinning, OCSP Stapling all that rendered obsolete and in majority cases will not work, unless target website doesn't use any of these, which for financial organizations for example is never the case nowadays. All that was specifically designed to mitigate MITM attack what basically any SSL inspections is.

[@rcbilly2009]

Great video

[@rcbilly2009]

I like to know more about cyber liability 😊

[@Polkster13]

So, what is the device?

[@WillieHowe]

Stay tuned!

[@NetJrLLC]

I’m guessing EFG?

[@WillieHowe]

I'm not sure what that is so gonna have to say no.

[@NetJrLLC]

@@WillieHowe ah come on it’s public domain now… they released that info on live stream with wifi tech field day! I’m pumped too for a product that doesn’t exist yet

[@WillieHowe]

@@NetJrLLC I promise it's not called the EFG.

[@NetJrLLC]

@@WillieHowe well I’ll be darned. Thought I was with the times. New products left and right

[@WillieHowe]

@@NetJrLLC It's not Ubiquti at all.