## HTTPS inspection in Proxy environment We have proxy server which is processing all https and http traffic. is there any best practise to enable https inspection on edge checkpoint gateway [1\\ \\ \\ Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/appliances-and-gaia/message-id/58897/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/22946?t:ac=board-id/appliances-and-gaia/thread-id/58897&t:cp=kudos/contributions/tapletcontributionspage&ticket=ccycVxiqHfPg_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946) - [All forum topics](https://community.checkpoint.com/t5/Firewall-and-Security-Management/bd-p/appliances-and-gaia/page/620 "Firewall and Security Management") - [Previous Topic](https://community.checkpoint.com/t5/Firewall-and-Security-Management/Incident-notification-in-1400-series-appliances/td-p/22005 "Incident notification in 1400 series appliances") - [Next Topic](https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPS-Protections-in-Detect-Staging-State/td-p/44373 "IPS Protections in Detect (Staging) State") 5 Replies [PhoneBoy](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7) Admin ‎2018-05-1001:01 PM [Show option menu](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=appliances-and-gaia&message.id=58898) - [Permalink](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/m-p/22947/highlight/true#M58898) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/appliances-and-gaia/message-id/58898/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/22947) You would treat the proxy server just as a client, which means configuring it to trust the CA certificate Check Point uses for HTTPS Inspection. [1\\ \\ \\ Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/appliances-and-gaia/message-id/58898/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/22947?t:ac=board-id/appliances-and-gaia/thread-id/58897&t:cp=kudos/contributions/tapletcontributionspage&ticket=ccycVxiqHfPg_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946) [Hugo\_vd\_Kooij](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/918) MVP Gold ‎2018-05-1612:55 AM [Show option menu](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=appliances-and-gaia&message.id=58899) - [Permalink](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/m-p/22948/highlight/true#M58899) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/appliances-and-gaia/message-id/58899/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/22948) There is a potential pitfall there. From the perspective of the firewall it's 1 client doing a lot of HTTP and HTTPS sessions. That might get you into trouble where you overload 1 worker and get poor responses. I strongly suggest you enable Dynamic dispatching as detaild in [sk105261 : CoreXL Dynamic Dispatcher in R77.30 / R80.10 and above](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105261) as it will ruin your day if you start doing HTTPS inspection without it and your gateway gets hit by all that proxy traffic. Also if you do HTTPS inspection on the proxy .... You might not want to do it again on the gateway. It will ruin your response times as you may notice as people find that webpages load slower. As with anything in live: Just give it some though before you start implementing it. There is definitely more to it then meets the eye. << We make miracles happen while you wait. The impossible jobs take just a wee bit longer. >> [1\\ \\ \\ Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/appliances-and-gaia/message-id/58899/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/22948?t:ac=board-id/appliances-and-gaia/thread-id/58897&t:cp=kudos/contributions/tapletcontributionspage&ticket=ccycVxiqHfPg_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946) [Laxi\_D](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/24640) Contributor ‎2018-05-1610:46 AM [Show option menu](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=appliances-and-gaia&message.id=58900) - [Permalink](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/m-p/22949/highlight/true#M58900) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/appliances-and-gaia/message-id/58900/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/22949) Main reason for activating https inspection on firewall is Sand Blast Appliance. Without https inspection threat emulation is in vain, right? 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/22949?t:ac=board-id/appliances-and-gaia/thread-id/58897&t:cp=kudos/contributions/tapletcontributionspage&ticket=ccycVxiqHfPg_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946) [PhoneBoy](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7) Admin ‎2018-05-1609:36 PM [Show option menu](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=appliances-and-gaia&message.id=58901) - [Permalink](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/m-p/22950/highlight/true#M58901) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/appliances-and-gaia/message-id/58901/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/22950) [In response to Laxi\_D](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/m-p/22949/highlight/true#M58900) You're going to miss a bunch of potential threats without HTTPS Inspection, yes. [1\\ \\ \\ Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/appliances-and-gaia/message-id/58901/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/22950?t:ac=board-id/appliances-and-gaia/thread-id/58897&t:cp=kudos/contributions/tapletcontributionspage&ticket=ccycVxiqHfPg_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946) [Albert\_Wilkes](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/6489) Collaborator ‎2018-06-2504:55 AM [Show option menu](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=appliances-and-gaia&message.id=58902) - [Permalink](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/m-p/22951/highlight/true#M58902) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/appliances-and-gaia/message-id/58902/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/22951) [In response to PhoneBoy](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/m-p/22950/highlight/true#M58901) Consider having your proxy in a DMZ so the CP sees the proxied ("CONNECT" ) request rather than an encrypted tunnel only as it will have an impact on whether the CP will be able to learn the actual hostname or just the certificate information. This is particularly important for correctly logging or bypassing sites that are hosted on a site like cloudflare where the logging and bypassing information would otherwise only show cloudflare rather than the actual website. See my research here [https://community.checkpoint.com/thread/7621-https-inspection-real-life-examples-and-caveats-in-r773...](https://community.checkpoint.com/thread/7621-https-inspection-real-life-examples-and-caveats-in-r7730) 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/22951?t:ac=board-id/appliances-and-gaia/thread-id/58897&t:cp=kudos/contributions/tapletcontributionspage&ticket=ccycVxiqHfPg_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946) Post Reply Leaderboard Epsum factorial non deposit quid pro quo hic escorol. | User | Count | | --- | --- | |
[WiliRGasparetto](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/96099) | 50 | |
[israelfds95](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/93117) | 33 | |
[jorgeluiznim](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/85528) | 14 | |
[Bob\_Zimmerman](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/27871) | 10 | |
[Martijn](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/3058) | 8 | |
[Alex-](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10384) | 6 | |
[Tomer\_Noy](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/9372) | 6 | |
[Lesley](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/73547) | 5 | |
[emmap](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/71054) | 5 | |
[simonemantovani](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/79070) | 5 | [View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/appliances-and-gaia/timerange/one_month/page/1/tab/authors) Trending Discussions [Bug on LOM Date and Time](https://community.checkpoint.com/t5/Firewall-and-Security-Management/Bug-on-LOM-Date-and-Time/td-p/279183) [\[TIP\] Check Point Migration Backup: Collecting Relevant Files Before a Clean Install](https://community.checkpoint.com/t5/Firewall-and-Security-Management/TIP-Check-Point-Migration-Backup-Collecting-Relevant-Files/td-p/279043) [\[INFO\] Why Can Gaia Configure LOM If LOM Is Supposed to Be Independent?](https://community.checkpoint.com/t5/Firewall-and-Security-Management/INFO-Why-Can-Gaia-Configure-LOM-If-LOM-Is-Supposed-to-Be/td-p/279048) Upcoming Events Sort by: - [All](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946#) - [Virtual](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946#) - [In-Person](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946#) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) Thu 30 Jul 2026 @ 11:30 AM (CDT) [CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) [Virtual](https://community.checkpoint.com/labels/Virtual) Thu 30 Jul 2026 @ 10:00 AM (PDT) [AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411) [In-Person](https://community.checkpoint.com/labels/In-Person) Tue 11 Aug 2026 @ 11:30 AM (EDT) [New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 13 Aug 2026 @ 11:30 AM (EDT) [Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 08:30 AM (COT) [Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 06:00 PM (COT) [Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 27 Aug 2026 @ 09:00 AM (CEST) [Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914) [In-Person](https://community.checkpoint.com/labels/In-Person) Wed 21 Oct 2026 @ 09:00 AM (BST) [AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505) [CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events) [Top](https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTPS-inspection-in-Proxy-environment/td-p/22946) About CheckMates - [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage) - [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage) Learn Check Point - [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0) - [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia) - [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix) Advanced Learning - [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm) - [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge) - [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=) - [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification) Resources - [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox) - [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub) - [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog) - [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live) Non-English Discussions - [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish) - [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais) - [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese) - [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese) - [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian) - [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan) YOU DESERVE THE BEST SECURITY We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates) [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/) ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/) Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.