QuestionQ49

VerifiedDeployment and configuration

Refer to the exhibits.

Question Image

You are setting up SSL offloading on FortiWeb to secure a public-facing application. Clients connect over HTTPS, and FortiWeb forwards requests to the back-end server over HTTP.

You are reviewing certificate deployment and must determine where to install the private key for the certificate used for client connections.

In this SSL-offloading configuration, which device uses the private key associated with the web server certificate?

Explanation

With SSL offloading, FortiWeb terminates the client-facing HTTPS session, presents the protected web server’s certificate, and uses its associated private key during the TLS handshake to decrypt traffic. The separate back-end connection is HTTP, so the server does not terminate that client TLS session.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!