Check Point HARMONY R81 Administration Manual page 46

Scenario 4 - Gaia Portal uses an external SSL certificate, Gaia Portal listens on TCP port 4434,
and Endpoint Security listens on TCP port 443
1. Import and install the certificates:
a. Obtain the CA certificate that generated the custom SSL certificate for the Gaia
Portal.
b. Import the applicable CA certificate on the Endpoint Security Management
Server.
Follow
c. Import the new Gaia Portal SSL certificate on the Endpoint Security
Management Server.
Follow
d. Install the new CA certificate on Endpoint Clients.
Follow
e. Install the new Gaia Portal SSL certificate on the Endpoint Security
Management Server.
Follow
2. Connect to the command line on the Endpoint Security Management Server.
3. Log in to the Expert mode.
4. Modify the $UEPMDIR/apache/conf/ssl.conf file:
a. Back up the current file:
cp -v $UEPMDIR/apache/conf/ssl.conf{,_BKP}
b. Edit the current file:
vi $UEPMDIR/apache/conf/ssl.conf
c. Configure this value in the "Listen" directive:
Listen
d. In the "SSL Virtual Host Context" section, configure this value in the
"VirtualHost" directive:
<VirtualHost _default_:4434>
e. Save the changes in the file and exit the editor.
Connection Port to Services on an Endpoint Security Management Server
"Importing External PKI Certificates" on page 30
"Importing External PKI Certificates" on page 30
"Installing CA Certificates on Clients" on page 31
"Installing SSL Certificates on Servers" on page 32
0.0.0.0:4434
R81 Harmony Endpoint Server Administration Guide | 46
.
.
.
.