Web Gateway 7.1.5 Product Guide - McAfee

Proxies and caching
Reverse HTTPS proxy configuration 3
Configure SSL certificate handling in a reverse HTTPS proxy configuration
When the appliance sends SSL certificates to its clients in a reverse HTTPS proxy configuration, they
must be the original certificates of the web servers that the clients request access to. You need to
import these certificates to the appliance to make them available there.
1 Go to Policies | Settings.
2 On the Engines branch of the settings tree, select Enable SSL Client Context without CA.
3 Click Add above the settings tree. The Add Settings window opens.
4 In the Name field, enter a name for the settings you want to add, for example, Imported web server
certificates.
5 In the Define SSL Client Context (Without Certificate Authority) section, click Add under
Select server certificate by host or IP. The Add Host to Certificate Mapping window opens.
6 Under Define Mapping, configure settings that map the host name of a web server to its certificate.
Then click OK. The window closes and the new mapping settings are added to the list.
Note: Repeat this step to add mapping settings for multiple host names and certificates.
7 [Optional] Do one of the following to configure the connection from the appliance to the web server:
• If you do not want the server connection to be SSL-secured, select SSL-Scanner functionality
applies only to client connection.
Note: In this case, you also need to set up a rule that changes the network protocol from HTTPS to
HTTP.
• If you want the server connection to be SSL-secured, deselect SSL-Scanner functionality
applies only to client connection.
8 Click Save Changes.
Create a rule set for setting the URL.Host property
To create a rule set with rules that set the URL.Host property to the appropriate value for the IP
addresses the appliance listens to, proceed as follows:
1 Go to Policy | Rule Sets.
2 On the rule sets tree, go to the position where you want to insert the rule set.
3 Above the tree, click Add and select Rule Set. The Add New Rule Set window opens.
4 Under Name, enter a suitable name for the new rule set, for example, Set URL.Host property
according to particular IP addresses.
5 Make sure Enable is selected.
6 Under Applies to select Requests and IM.
7 Under Apply this rule set, select Always.
8 [Optional] Under Comment, type a plain-text comment on the rule set.
Click OK. The window closes and the new rule set is inserted in the rule sets tree.
McAfee Web Gateway 7.1.5 Product Guide 63