Managing The Imported Ssl Keys Of A Sensor - McAfee M-1250 - Network Security Platform Configuration Manual

McAfee® Network Security Platform 5.1
5
Figure 205: Configuring the Sensor's SSL functionality
6
7

Managing the imported SSL keys of a Sensor

The
SSL Decryption > Key Management
SSL keys that have been imported to Manager for a single Sensor_Name instance.
Three actions can be performed here:
•
•
•
Importing SSL keys to the Manager for a Sensor
The
keys to Manager for a single
pushed to the Sensor via
decrypt SSL traffic for IPS inspection. Manager provides a passthru interface for you to
import a set of public/private keys to the Sensor. Manager stores an escrow of the
imported keys for Sensor recovery purpose. However, Manager does not interpret the
escrowed keys, nor does it attempt to recover the keys themselves in case a Sensor has
SSL Cache Time
Enter a value for the
The value represents the length in time a session is kept alive after the last
connection closes. This value should be equal to or slightly longer than the session
cache time on the corresponding server.
Note: Because one Sensor could be processing traffic destined to many
servers, the number of sessions the Sensor can maintain may be considerably
lower than the number the servers can maintain. If the Sensor runs out of
session state, which is indicated by an alert in the Threat Analyzer, some flows
will not be processed.
SSL Operation Status
Note the
Sensor is currently enabled.
Apply
Click . If you are enabling/disabling SSL or have changed the SSL Flow Count,
you are prompted to reboot the Sensor for proper functionality.
Key Management Sensor_Name > SSL Decryption > Key Management
action (
(in the case of a failover pair)) enables you to manage the
Importing SSL keys to Manager for a Sensor (on page 206)
Re-importing an SSL key file (on page 107)
Deleting SSL key files from Manager (on page 208)
SSL Decryption > Key Import
action enables you to download Secure Socket Layer (SSL)
Sensor_Name
Update Configuration
. This time relates to session resumption in SSL.
. This field indicates whether or not SSL decryption on the
node. Once imported to Manager, keys can be
. Using provided SSL keys, a Sensor can
206
The IPS Sensor_Name node
Failover pair Name >
or