- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Various methods to distribute SonicWall DPI SSL certificate
06/12/2020 
18 People found this article helpful
35,751 Views
Description
Deep Packet Inspection of Secure Socket Layer (DPI-SSL) extends SonicWall's Deep Packet Inspection technology to the inspection of encrypted HTTPS traffic and other SSL-based traffic. The SSL traffic is decrypted (intercepted) transparently, scanned for threats, and then re-encrypted and, if no threats or vulnerabilities are found, sent along to its destination.
After performing DPI-SSL inspection, the appliance re-writes the certificate sent by the remote server and signs this newly generated certificate with the certificate specified in the Client DPI-SSL configuration. By default, this is the firewall certificate authority (CA) certificate, but a different certificate can be specified. Users should be instructed to add the certificate to their browser's trusted list to avoid certificate trust errors.
Resolution
TIP: It is always recommended to create your own DPI SSL Certificate For The Purpose Of DPI-SSL Certificate Resigning. You can refer to How Can I Create A DPI-SSL Certificate For The Purpose Of DPI-SSL Certificate Resigning? for the same.
- Manual installation of the certificate
The certificate can be manually added on the end machine at the following sections.
a) Windows Certificate Store
How Can I Import The SonicWall DPI-SSL CA Certificate Into The Windows Certificate Store?
b) Modern Browsers
How To Install The DPI-SSL Certificate In Modern Browsers
c) Mozilla Firefox
Internet Explorer, Chrome, Opera uses the Windows Certificate store to build trust. Mozilla Firefox uses its own certificate store and the CA certificate must be manually imported into the Firefox certificate store.
How Can I Manually Import The Client DPI-SSL CA Certificate Into Firefox? - Group Policy
Distributing The Default SonicWall DPI-SSL CA Certificate To Client Computers Using Group Policy
This can also be done specifically for browsers
How Can I Distribute SonicWall DPI-SSL CA Certificate To Web Browsers? - Capture Client Policy
How Do I Add A SSL Certificate In The Capture Client? - Specific OS based installations
a) MAC OS
How To Import The DPI-SSL Client Certificate Under MacOS
b) Ubuntu OS
How To Add DPI-SSL CA Certificate On Ubuntu OS?
For more details on DPI SSL, please check Where Can I Learn More About DPI-SSL?
Related Articles
- How to force an update of the Security Services Signatures from the Firewall GUI
- How to upload security services signatures manually on Closed Environments?
- How to Create Gen 7 Settings File by Using the Online Migration Tool
Categories
- Firewalls > NSa Series > Client/Server DPI-SSL
- Firewalls > TZ Series > DPI-SSL
- Firewalls > SonicWall SuperMassive 9000 Series > DPI-SSL
- Firewalls > SonicWall SuperMassive E10000 Series > DPI-SSL
YES
NO