Imperva Cyber Community

Hi Team,

I need to understand how incapsula secure communication between client----WAF----Origin server. will it use same Imperva certificate to secure communication from client----WAF and WAF ----Origin server. or it uses some different mechanism.

Hi Nitin,

It can be the same or a different cert; it depends upon the configuration.

The Cloud WAF functions as a reverse proxy, so there are 2 connections - a frontside and a backside. These connections are independent of each other, that is to say, that the client thinks the CWAF is the Origin, and the Origin thinks the CWAF is the client. 

Between the client and the CWAF (frontside) you have two options:

1. Bring your own cert
2. Use the included cert issued by GlobalSign

Between the CWAF and the Origin (your server) (backside connection) the CWAF will negotiate with whatever certificate is present on your Origin. 

This could be the same certificate as "your own cert" uploaded for the frontside connection, or it could be an entirely different cert.