Snort mailing list archives
SSL VPN Detection
From: Kotaro Takada <cyanic.anubis () gmail com>
Date: Mon, 11 Apr 2016 14:44:40 -0300
Hi, Are there rules that detect SSL VPN traffic (as opposed to other traffic, e.g. HTTPS via 443)? Compared to HTTPS, I hear that SSL VPN has some distinctive patterns in the traffic, e.g. three-way handshake, no pause in traffic, etc. Thank you, Ko
------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/ gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- SSL VPN Detection Kotaro Takada (Apr 11)