RE: Blocking ssl vpn connections

You need an "SSL proxy" (as your firewall) to do this.
Essentially it's a *authorized* "main in the middle", decrypting
and examining the data stream. At a minimum, it can verify that
this traffic using port 443 really is HTTPS. Some can also filter
the stream for malware and illicit content as well.

[Check out Blue Coat -- I think they have a White Paper up about
the things that their boxes can offer.]

David Gillett


-----Original Message-----
From: Andrew Stewart [mailto:astewart@xxxxxxxxxxxxx]
Sent: Thursday, March 23, 2006 1:34 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Blocking ssl vpn connections

How would one go about blocking an SSL VPN (e.g. openVPN) on
a firewall (or even detecting it via an IDS)? I was
wondering what a network/security administrator should do to
prevent an employee from connecting to a SSL VPN from
internal to the administrator's network to some unknown SSL
VPN server. I could see this being used for numerous things
that are not in agreement with most companies acceptable use policies.

---------------------------
Andrew Stewart
Gestamp Alabama, Inc.
IT Support Tech

astewart@xxxxxxxxxxxxx

--------------------------------------------------------------
-------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec
management education and the case study affords you unmatched
consulting experience.
Tailor your education to your own professional goals with
degree customizations including Emergency Management,
Business Continuity Planning, Computer Emergency Response
Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
--------------------------------------------------------------
-------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: Avoiding tunnels
    ... Blue Coat's new "SG" appliance line are SSL proxies (with ... management education and the case study affords you unmatched ... customizations including Emergency Management, Business Continuity Planning, ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • RE: Windows Log
    ... Among these are full desktop logins by ... > Tailor your education to your own professional goals with degree ... > customizations including Emergency Management, ... Business Continuity Planning, Computer Emergency Response ...
    (Security-Basics)
  • RE: Windows Log
    ... Among these are full desktop logins by ... > Tailor your education to your own professional goals with degree ... > customizations including Emergency Management, ... Business Continuity Planning, Computer Emergency Response ...
    (Security-Basics)
  • RE: Windows XP and FTP
    ... Subject: RE: Windows XP and FTP ... >>>Tailor your education to your own professional goals with degree ... >>>customizations including Emergency Management, Business Continuity ... >> Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: System Monitor
    ... >> The Norwich University program offers unparalleled Infosec ... >> Tailor your education to your own professional goals with degree ... >> Computer Emergency Response Teams, ... > customizations including Emergency Management, ...
    (Security-Basics)