I am a network engineer and utilize DPI (Deep packet inspection) to protect my various endpoints from known malicious entities. I do this by putting my letsencrypt cert on my firewall so that it can inspect the packets for malicious traffic.
In doing so all remote users are unable to connect to my server unless I disable DPI on port 32400.
This prevents me from getting insight into the kinds of threats I am seeing hitting that endpoint.
Are there any settings I can utilize to get this to function?
I have never tried this myself, but maybe if you use the exact same custom cert on both your Plex server and your firewall, the Plex clients may accept the packets which get re-encrypted by it.
Same wildcard certificate is used on both the nginx server and the firewall. Server is not using SSL directly it is being reverse proxied through NGINX. Secure connections is set to preferred.
