Re: Checkpoint smart defance as IPS

[Shreyas Zare <shreyas () secfence com>]

Hi,

Yes, but as Bretten Andrew mentioned earlier, the client machine needs
to trust an internal CA (which will be used to dynamically generate
cert for SSL MITM that matches the site being visited by user)

Regards,

--
Shreyas Zare

Sr. Information Security Researcher
Secfence Technologies
www.secfence.com


On Sun, May 30, 2010 at 2:40 AM, Craig S. Wright
<craig.wright () information-defense com> wrote:
> Not at all. Your comment was:
> "An IPS that decrypts SSL does not exist."
>
> This is blatantly false. IDS, IPS, Wireshark even all have SSL decryption
> capabilities. There is no requirement for a separate proxy.
>
> Checkpoint has this capability. NO extra proxy. You seem to be missing that
> distinction.
>
> Regards,
> ...
> Dr. Craig S Wright GSE-Malware, GSE-Compliance, LLM, & ...
> Information Defense Pty Ltd
>
>
>
> -----Original Message-----
> From: Trevor Alexander [mailto:trevor.alexander.email () gmail com]
> Sent: Sunday, 30 May 2010 4:28 AM
> To: <craig.wright () Information-Defense com>
> Cc: Laurens Vets; <mzcohen2682 () aim com>; <security-basics () securityfocus com>
> Subject: Re: Checkpoint smart defance as IPS
>
> You are saying the same thing me and anyone else who has posted on the
> topic is saying, you're just using different words. You should read
> the whole thread before you make comments.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------