What happens on TCP - TLS sessions with transparent proxy

[Aroika]

Hello World, I have a question regarding transparent proxy with Fortigate and TCP session. When a user tries to access a HTTP website with this setup, does the TCP session remains the same between the client and the destination webserver ?Or we have 2 sessions ?- One between client and FTG (transparent mode)- One between FTG and destination server I have also the same question with the TLS session when using HTTPS (and transparent proxy with ssl inspection).. Do we have 2 distinguished TLS session ? Thanks a lot by advance for your answers :)

[emnoc]

It has two legs with the FGT as a MiTM

1st leg ( client ) .  

      Web-browser------(forged CA cert )------FGT

2nd leg ( server side )

      FGT---------( real server cert ) ------WebServer

Ken Felix

[Aroika]

Thanks Ken for your answer.

So, regarding to the session, it means that a TLS session will be made between the client and the FGT, and a second TLS session will be made between the FGT and the remote web server ?

Client <=== tls#1 ===> FGT <=== tls#2 ===> Webserver

So the FGT will "brake" the original TLS session ?

What about the TCP session ? Will it remain the same ?

Client <--> FGT <--> Webserver

<===== TCP Session ====>

Thanks a lot