Configure Captive Portal Part 4: Create an SSL Policy with a Decrypt-Resign Rule

Step 1

If you haven't done so already, log in to the Firewall Management Center.

Step 2

If you haven't done so already, create a certificate object to decrypt TLS/SSL traffic as discussed in PKI.

Step 3

Click Policies > Access Control heading > SSL.

Step 4

Click New Policy.

Step 5

Enter a Name and choose a Default Action for the policy. Default actions are discussed in SSL Policy default actions.

Step 6

Click Save.

Step 7

Click Add Rule.

Step 8

Enter a Name for the rule.

Step 9

From the Action list, choose Decrypt - Resign.

Step 10

From the with list, choose your PKI object.

Step 11

Click Users.

Step 12

Above the Available Realms list, click Refresh ().

Step 13

In the Available Realms list, click Special Identities.

Step 14

In the Available Users list, click Unknown.

Step 15

Click Add to Rule.

The following figure shows an example.

Step 16

(Optional.) Set other options as discussed in TLS/SSL Rule conditions.

Step 17

Click Add.

Step 18

At the top of the page, click Save.