SSL FIREWALL
You will need to take some additional decisions in case you would need to conduct SSL transactions through a firewall.
You can get firewall in a program which exists in several different forms but functions as a barrier between LAN and the outside world.
SSL protocol interprets your computer on which a firewall is running as it presents a man in the middle attack preventing the transaction from happening. One of approaches for facilitating is SSL transactions through a firewall.
Opening the firewall enables all traffic through a designated port. Here is the typical port for HTTP over SSL is 443 and the port can be opened for allowing traffic through to the destination web server.
This ensures that the firewall can make security decisions depending on the apparent origin of the packet and its destination. Firewalls certainly cannot examine the encrypted data in their requests.
Configure the boundary system or firewall as a proxy server. Here the boundary system is the destination for SSL traffic from the client. The boundary system is authenticated by the client and the connection from boundary system to the internal system may or may not be protected using SSL. This leads to an authentication problem since proxy needs transmitting authenticated identity of original user to the internal system. You cannot use the certificate mapping feature of Windows Server 2003 at the application server as the authentication process relying on user certificate takes place at the proxy.
|