NETGEAR STM150 - ProSecure Web And Email Threat Management Appliance Reference Manual page 77

ProSecure Web/Email Security Threat Management (STM) Appliance
The STM uses digital certificates to authenticate connecting HTTPS servers, and to allow
HTTPS clients to be authenticated by remote entities. A digital certificate that authenticates a
server, for example, is a file that contains the following elements:
• A public encryption key to be used by clients for encrypting messages to the server.
• Information identifying the operator of the server.
• A digital signature confirming the identity of the operator of the server. Ideally, the
signature is from a trusted third party whose identity can be verified.
When a security alert is generated, the user can decide whether or not to trust the host.
Figure 46.
You can obtain a digital certificate from a well-known commercial Certificate Authority (CA)
such as Verisign or Thawte. Because a commercial CA takes steps to verify the identity of an
applicant, a digital certificate from a commercial CA provides a strong assurance of the
server's identity.
The STM contains a self-signed digital certificate from NETGEAR. This certificate can be
downloaded from the STM login screen or from the Certificate Management screen for
browser import. However, NETGEAR recommends that you replace this digital certificate
with a digital certificate from a well-known commercial CA prior to deploying the STM in your
network.
The STM's Certificate Management screen lets you to view the currently loaded digital
certificate for HTTPS scans, upload a new digital certificate, manage the trusted CA
authorities list, and manage the untrusted certificates list.
To display the Certificate Management screen, select Web Security > Certificate
Management from the menu. Because of the size of this screen, and because of the way the
information is presented, the Certificate Management screen is divided and presented in this
manual in three figures (the following figure,
page 80).
Figure 48 on page 79, and
Chapter 3. Performing Network and System Management
Figure 49 on
| 77