Snort mailing list archives

SSL VPN Detection


From: Kotaro Takada <cyanic.anubis () gmail com>
Date: Mon, 11 Apr 2016 14:44:40 -0300

Hi,

Are there rules that detect SSL VPN traffic (as opposed to other traffic,
e.g. HTTPS via 443)?

Compared to HTTPS, I hear that SSL VPN has some distinctive patterns in the
traffic, e.g. three-way handshake, no pause in traffic, etc.

Thank you,

Ko
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/
gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: