Navigating to the below URL link from the Mozilla Firefox and entering some website link and clicking on View, displays certificate Viewer
After enabling Decrypt & scan HTTPS traffic from the firewall rule, all the clients cannot go to www because they don’t have SSL CA Certificate.
So they have included the
SecurityAppliance_SSL_CA (.pem format) and installed on to the client machines from the Microsoft Management Console (MMC) i.e, from the Trusted Root
Certification Authorities > Certificates. Performing Import *.pem file
And also included a private key specific to the static IP address identified unique specifying the Friendly Name to be SSIS Master Service
It's very clear that they are not using any proxy server.
Firefox detected a potential security threat and did not continue. Because Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: false
HTTP Public Key Pinning: true
I do own an Anti-Virus software from Sophos Endpoint Security and control for my personal PC, with Web protection enabled. But I don't get any sort of messages from the FireFox
So my question is what is the purpose of doing this? and Does our passwords gets decrypted in an encrypted websites via MITM decryption or store logs? Is there any way to get around this?