Eliminating Your SSL Blind Spot: The Solution to Managing and Securing HTTPS Traffic

White Paper
www.securecomputing.com
Eliminating Your SSL Blind Spot: The solution to managing-and securing-HTTPS traffic®Secure Computing has been solving the most difficult network and application security challenges for over 20 years. We help our customers create trusted environments both inside and outside their organizations. Table of contentsAbstract.................................................................................................................................2Introduction..........................................................................................................................2Rising popularity of SSL.........................................................................................................2Threat assessment- Viruses and malware can hide in encrypted traffic...................................2 Why "secure" connections are not "safe"..........................................................................3 Are trusted certificates trustworthy?..................................................................................3What are employees trying to hide?.......................................................................................3SSL risk scenarios: Could this happen to your company?........................................................4The conventional response....................................................................................................5Meeting the challenge...........................................................................................................5Webwasher SSL Scanner overview.........................................................................................6 Secure Computing Corporation How decryption works......................................................................................................7 Corporate Headquarters Security by design.............................................................................................................74810 Harwood RoadSan Jose, CA 95124 USA Webwasher SSL Scanner advantages......................................................................................8Tel +1.800.379.4944Tel +1.408.979.6100Fax +1.408.979.6501 Summary...............................................................................................................................8European Headquarters References.............................................................................................................................91, The ArenaDownshire WayBracknellBerkshire, RG12 1PU UKTel +44.0.870.460.4766Fax +44.0.870.460.4767Asia/Pac Headquarters1604-5 MLC Tower248 Queen's East RoadWan Chai Hong KongTel +852.2520.2422Fax +852.2587.1333Japan HeadquartersShinjuku Mitsui Bldg. 2, 7FNishi-Shinjuku 3-2-11Shinjuku-ku Tokyo, 160-0023JapanTel +81.3.5339.6910Fax +81.3.4496.4537For a complete listing of all our global offices, see www.securecomputing.com/goto/globaloffices© August 2006 Secure Computing Corporation. All Rights Reserved. WW-SSL-WP-Aug06vF. Bess, enterprise strong, G2 Firewall, MobilePass, PremierAccess, SafeWord, Secure Computing, SecureOS, SecureSupport, Sidewinder G2, Sidewinder, SmartFilter, SofToken, Strikeback, Type Enforcement, CyberGuard, and Webwasher are trademarks of Secure Computing Corporation, registered in the U.S. Patent and Trademark Office and in other countries. Application Defenses, G2 Enterprise Manager, On-Box, Power-It-On!, RemoteAccess, SecureWire, Securing connections between people, applications, and networks, Sentian, SmartReporter, ZAP, Anti-Virus Multi-Scan, Anti-Virus, PreScan, Live Reporting, MethodMix, and SnapGear are trademarks of Secure Computing Corporation. All other trademarks used herein belong to their respective owners.AbstractWeb encryption is indispensable for today's businesses, but organizations with an open port 443 (HTTPS tunnel) on their firewall are left with a major security hole wide open in their network. Traditional firewalls and gateway anti-virus solutions are unable to scan encrypted traffic, and therefore can provide no control over what content is sent in and out of organizations' networks via HTTPS. This presents risks to organizations that may not www.securecomputing.com realize they cannot rely on their HTTP filters to protect HTTPS encrypted traffic. Risk also exists with regulatory compliance. Can an organization be compliant if they allow open SSL tunnels which could conta... [download for more]