Get three services for $100/mo
- Related Stories
-
U.S. mulls new digital-signature standard
November 1, 2005 -
Microsoft outlines IE 7 security plans
October 27, 2005 -
Bug exposes Cisco switches to attacks
October 19, 2005 -
Phishing hole discovered in IE
December 17, 2004
Secure Sockets Layer, or SSL, has many legitimate uses, but also provides an "encrypted tunnel" that lets malicious code and phishing sites bypass most network security methods, Blue Coat said. The company announced Tuesday that it is updating its proxy product, ProxySG, to eliminate that "blind spot" in network security.
To improve corporate security, the new feature will enable organizations to decrypt SSL traffic so they can scan traffic for malicious code and other threats, the Sunnyvale, Calif.-based company said. It would also enable companies to provide better internal policy enforcement by, for example, governing which encrypted applications their employees are allowed to use.
SSL is widely used on the Internet to secure connections between a user's browser and services such as online banking, travel booking and other Web-based applications. When SSL is in use, the user typically sees a "padlock" icon in the bottom-right corner of the browser.
Essentially, Blue Coat's decryption feature would enable the overseer of corporate networks to view all aspects of employee traffic, such as the contents of a purchase made over a so-called secure connection.
Blue Coat isn't the first to decrypt SSL traffic for network security. Other vendors provide similar Big Brother-esque functionality. Finjan Software, for example, also sells an appliance that is capable of scanning the encrypted SSL content.
Blue Coat's new SSL proxy functionality is due in January as an option for its ProxySG product. Pricing ranges from $450 to $11,995, the company said.
See more CNET content tagged:
Blue Coat Systems Inc.,
SSL,
network security,
traffic,
malicious code
For a business, SSL is both a blessign and a curse, it enables them to handle things securely, but a the same time it can exploited to accomodate various purposes. It can be used to bypass security measures installed at the firewall, so every added security is more than welcome.