How to enable SSL Apple iphone monitoring, IOS how to install the ca certificate

WFilter the "monitor SSL" module, may decrypt the content and https SSL encryption smtp / imap / pop3 thus recorded contents. The SSL monitoring module can control both the computer and the phone has the same effect. But should not affect the normal use of the client, you first need to install the ca certificate on the client machine. Ca certificates installed on the computer is relatively simple, we will not repeat them. In this article, I'll show you how to install the SSL certificate on surveillance ca (iphone) in the Apple phone, enabling SSL monitoring of the iphone.

1. Turn on the monitor SSL

201909101568086671106726.png

When turned on, turn on https sites in safari browser, you will have the following tips:

201909101568086731429605.png

To resolve this problem, you need to install the ca certificate on the client can achieve. The following are specific import steps.

2. The two installation certificate file

Certificate files can be downloaded in the "SSL monitoring" of the "Certificate Configuration". After downloading a file ca.crt, the ca.crt certificate file installed in two ways:

  1. Mail installation. Email sent to ca.crt document as an attachment to the client after receiving the message on to open the attachment mounting iphone.

  2. Installed through safari browser. FIG following steps:

safari browser access WFilter address, ca.crt download files. Such as "192.168.1.1/bak/ca.crt".

201909101568087278979868.png

Once downloaded, the "configuration" "downloaded profiles" can be seen in the certificate file.

201909101568087337136251.png

Click "Install" to install the certificate.

201909101568087383107643.png

201909101568087426102684.png

201909101568087454116522.png

Also need "certificate trust settings", trust the certificate.

201909101568087472914818.png

ios10.png

3. Test results

After the above configuration, you can monitor access to the content of https. Figure:

201909101568087670851625.png


Guess you like

Origin blog.51cto.com/12800391/2440333