The Website Firewall Platform is, in effect, "man-in-the-middling" all traffic intended for your website in order to inspect, filter and protect your infrastructure. In order for this to be possible, the Website Firewall Platform must use an SSL key to set up HTTPS encryption and represent your website’s identity.
The Website Firewall Platform supports three kinds of SSL certificate upload:
If you have an SSL Certificate that is purchased from and provided by Memset, you can select the appropriate certificate from a drop-down list and we will auto-configure this for you. This will prevent cryptographic and ‘site not secure’ warnings from being displayed in user browsers.
You can select the ‘Let’s Encrypt’ option. This will automatically generate an SSL certificate for you as soon as the DNS is configured, which will auto renew once it expires. This option requires no further configuration, but may cause cryptographic and ‘site not secure’ warnings to be displayed in user browsers for a period of time after deployment.
If you have your own SSL Certificate, you can select the "Manually Specified" option. Where your website uses an existing third-party certificate, you may upload the PEM and Cert keys for the SSL Certificate to the Website Firewall Platform. This will prevent cryptographic and ‘site not secure’ warnings from being displayed in user browsers.
Last updated 18 June 2019, 09:12 GMT