What is SSL inspection? Why do we use SSL inspection?

Поділитися
Вставка
  • Опубліковано 25 чер 2024
  • This week I'm going to show you a very affordable SSL inspecting firewall -- before we get to that we need to talk about SSL inspection and what it does. SSL inspection essentially allows us to intercept traffic in our network - break it apart, look at the traffic, repackage it, and send it to the host -- all without the host knowing. SSL inspection takes our tools like DNS filtering and IDS/IPS and makes them even more powerful! With great power comes great responsibility!
    Join our community here: community.williehowe.com
    Hire us! williehowe.com
    Want to join us in learning how to deploy network services like this? Put your name on the training list now: williehowe.com/training/
    Name Cheap Affiliate Link: namecheap.pxf.io/oqZMv9
    Affiliate Links (I earn a small percentage of the sale if you use these links):
    UniFi Store General Link: store.ui.com/?a_aid=WillieHowe
    My AmazonLink: www.amazon.com/shop/williehowe
    Netool: netool.io use code WHT to save at least 10%!
    Digital Ocean Affiliate Link: m.do.co/c/39aaf717223f
    Patreon Link: / williehowe
    Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!
    Come back for the next video!
    Twitter - @WillieHowe
    TikTok - @whowe82
    SUBSCRIBE! THUMBS-UP! Comment and Share!
  • Наука та технологія

КОМЕНТАРІ • 18

  • @jfred1989
    @jfred1989 29 днів тому

    Thanks for the video. I am interested to hear your plan to deal with tls1.3 and also certificate pinning on mobile devices.

  • @JosephJohnson-sq4bu
    @JosephJohnson-sq4bu Місяць тому +1

    Set this up for Palo Alto, was quite the learning process, but I agree. Was intimidating at first but got the hang of it

  • @rcbilly2009
    @rcbilly2009 Місяць тому

    Great video

  • @ZorgFS
    @ZorgFS Місяць тому

    true, that was like that in good old times of SQUID and such.
    now with modern certificates and techs like Certificate Pinning, OCSP Stapling all that rendered obsolete and in majority cases will not work, unless target website doesn't use any of these, which for financial organizations for example is never the case nowadays. All that was specifically designed to mitigate MITM attack what basically any SSL inspections is.

  • @rcbilly2009
    @rcbilly2009 Місяць тому

    I like to know more about cyber liability 😊

  • @aopen130
    @aopen130 Місяць тому

    Is this the same as HTTPS filtering in Adguard on Android? They require the user install a CA from Adguard and inspect and filter ads?

  • @Polkster13
    @Polkster13 Місяць тому

    So, what is the device?

  • @NetJrLLC
    @NetJrLLC Місяць тому

    I’m guessing EFG?

    • @WillieHowe
      @WillieHowe  Місяць тому +1

      I'm not sure what that is so gonna have to say no.

    • @NetJrLLC
      @NetJrLLC Місяць тому

      @@WillieHowe ah come on it’s public domain now… they released that info on live stream with wifi tech field day! I’m pumped too for a product that doesn’t exist yet

    • @WillieHowe
      @WillieHowe  Місяць тому +1

      @@NetJrLLC I promise it's not called the EFG.

    • @NetJrLLC
      @NetJrLLC Місяць тому

      @@WillieHowe well I’ll be darned. Thought I was with the times. New products left and right

    • @WillieHowe
      @WillieHowe  Місяць тому

      @@NetJrLLC It's not Ubiquti at all.