Presentation is loading. Please wait.

Presentation is loading. Please wait.

ClearTunnel Close the SSL Hole! Copyright ©2008 Collective Software, LLC.

Published byBerenice Hart Modified over 8 years ago

Similar presentations

Presentation on theme: "ClearTunnel Close the SSL Hole! Copyright ©2008 Collective Software, LLC."— Presentation transcript:

1 ClearTunnel Close the SSL Hole! Copyright ©2008 Collective Software, LLC

2 ISA Proxy: HTTP ISA Server and Web Filters Anti- Virus Content Filters Data Loss Prevention Web client Internet -- LAN -- ??? OK??? OK HTTP Top Secret !!

3 ISA Proxy: SSL ISA Server and Web Filters Web client Internet -- LAN -- ??? HTTPS ??? Blind SSL Tunnel Top Secret No filtering possible! !!

4 ISA Proxy with ClearTunnel ISA Server and Web Filters Web Filters Web client Internet -- LAN -- ??? OK??? OK HTTP Top Secret !! SSL Server SSL Client ??? OK HTTPS ??? OK HTTPS

5 ClearTunnel Architecture ISA Server and Web Filters Web Filters SSL Client SSL Web Servers server2 ??? OK HTTPS server1 server3 Plain HTTP

6 ClearTunnel Architecture ISA Server and Web Filters Web Filters Delegate SSL Server server3 server2 Root server1 Plain HTTP Active Directory Certificate Services

7 ClearTunnel Architecture ISA Server and Web Filters Trust SSL Server ??? OK HTTPS Web client Root server3 server2 server1 Active Directory Certificate Services

8 ClearTunnel Architecture ISA Server and Web Filters Web Filters Delegate SSL Server server3 server2 SSL Client SSL Web Servers Root server2 server1 ??? OK HTTPS ??? OK HTTPS server1 server3 Web client Trust Root Active Directory Certificate Services

Download ppt "ClearTunnel Close the SSL Hole! Copyright ©2008 Collective Software, LLC."

Similar presentations

AI3 Contact Server Takeshi Usui

AI3 Contact Server Takeshi Usui
The following 10 questions test your knowledge of Internet-based client management in Configuration Manager 2007. Configuration Manager 2007 Internet-Based.

The following 10 questions test your knowledge of Internet-based client management in Configuration Manager Configuration Manager 2007 Internet-Based.
How to INSTALL THE CERTIFICATE

How to INSTALL THE CERTIFICATE
Visibility. Then Control. Keep good employees from doing bad things on the Internet.

Visibility. Then Control. Keep good employees from doing bad things on the Internet.
CSE 461 Section. “Transport Layer Security” protocol Standard protocol for encrypting Internet traffic Previously known as SSL (Secure Sockets Layer),

CSE 461 Section. “Transport Layer Security” protocol Standard protocol for encrypting Internet traffic Previously known as SSL (Secure Sockets Layer),
BASIC CRYPTOGRAPHY CONCEPT. Secure Socket Layer (SSL)  SSL was first used by Netscape.  To ensure security of data sent through HTTP, LDAP or POP3.

BASIC CRYPTOGRAPHY CONCEPT. Secure Socket Layer (SSL)  SSL was first used by Netscape.  To ensure security of data sent through HTTP, LDAP or POP3.
Adwait JoshiJim Harrison Sr. Product ManagerProgram Manager Microsoft Corporation SESSION CODE: SIA308.

Adwait JoshiJim Harrison Sr. Product ManagerProgram Manager Microsoft Corporation SESSION CODE: SIA308.
What's new in Threat Management Gateway (TMG) 2010 Ronald Beekelaar

What's new in Threat Management Gateway (TMG) 2010 Ronald Beekelaar
Module 5: Configuring Access to Internal Resources.

Module 5: Configuring Access to Internal Resources.
Red Hat Linux Network. Red Hat Network Red Hat Network is the environment for system- level support and management of Red Hat Linux networks. Red Hat.

Red Hat Linux Network. Red Hat Network Red Hat Network is the environment for system- level support and management of Red Hat Linux networks. Red Hat.
MS Proxy Internet Microsoft Proxy Server Secure Network LAN.

MS Proxy Internet Microsoft Proxy Server Secure Network LAN.
TCP/IP Protocol Suite 1 Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display. Chapter 30 Internet Security.

TCP/IP Protocol Suite 1 Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display. Chapter 30 Internet Security.
Implementing ISA Server Caching. Caching Overview ISA Server supports caching as a way to improve the speed of retrieving information from the Internet.

Implementing ISA Server Caching. Caching Overview ISA Server supports caching as a way to improve the speed of retrieving information from the Internet.
0-1 Team 1 Status Report (1 of 3) Client Contact –Point 1 –Point 2 Team Meetings –Point 1 –Point 2 Team Organization –Point 1 –Point 2 Team 1: Auto-Owners.

0-1 Team 1 Status Report (1 of 3) Client Contact –Point 1 –Point 2 Team Meetings –Point 1 –Point 2 Team Organization –Point 1 –Point 2 Team 1: Auto-Owners.
0-1 Team ?? Status Report (1 of 3) Client Contact –Point 1 –Point 2 Team Meetings –Point 1 –Point 2 Team Organization –Point 1 –Point 2 Team 1: Auraria.

0-1 Team ?? Status Report (1 of 3) Client Contact –Point 1 –Point 2 Team Meetings –Point 1 –Point 2 Team Organization –Point 1 –Point 2 Team 1: Auraria.
 Proxy Servers are software that act as intermediaries between client and servers on the Internet.  They help users on private networks get information.

 Proxy Servers are software that act as intermediaries between client and servers on the Internet.  They help users on private networks get information.
Proxy servers By Akshit, Jay and Bhum Y10. What is a proxy server O A proxy server is a computer that offers a computer network service to allow clients.

Proxy servers By Akshit, Jay and Bhum Y10. What is a proxy server O A proxy server is a computer that offers a computer network service to allow clients.
Secure Remote Access to an Internal Web Server Christian Gilmore, David Kormann, and Aviel D. Rubin ATT Labs - Research “The security policy usually amounts.

Secure Remote Access to an Internal Web Server Christian Gilmore, David Kormann, and Aviel D. Rubin ATT Labs - Research “The security policy usually amounts.
Ing. Ondřej Ševeček | GOPAS a.s. | MCM: Directory Services | MVP: Enterprise Security | | |

Ing. Ondřej Ševeček | GOPAS a.s. | MCM: Directory Services | MVP: Enterprise Security | | |
Proxy servers By Akshit Y10. What is a proxy server O A proxy server is a computer that offers a computer network service to allow clients to make indirect.

Proxy servers By Akshit Y10. What is a proxy server O A proxy server is a computer that offers a computer network service to allow clients to make indirect.

Similar presentations

Ads by Google