HTTPS Scanning

Peer inside encrypted sessions for damaging contents.

A secure surfing session protects user data and privacy, but threatens the security of the company. Sites visited and files downloaded over HTTPS can contain malicious content that can enter the network while the security device remains blind. Astaro’s HTTPS filtering removes this unwanted network blind spot and gives you full visibility into this traffic.

Description & Screenshots

HTTPS is a secure connection usually made between the user’s browser and a target website. Web masters use HTTPS in their sites so that file sharing and even home-user sites can make use of HTTPS.

Astaro’s HTTPS filtering can examine inside encrypted streams using an advanced man-in-the-middle approach to provide a full range of control. Acting as a trusted authority which can be deployed by download, email attachment or directory policy push, Astaro is able to completely scan HTTPS.

URL filtering can be performed on the sites accessed and Astaro can also look deep inside the stream itself and identify viruses, spyware and malicious content that is being accessed over HTTPS. This provides great protection should a site that is trusted become compromised and start serving malicious content over HTTPS, as Astaro will still be able to stop it. Programs which tunnel over HTTPS, like anonymous surfing or crafty instant message programs will no longer be allowed to connect.

Technical Information

Astaro’s HTTPS Scanning offers fully transparent content filtering even for encrypted web sessions protecting against abuse, infection, and unwanted surfing activity over HTTPS.

Transparent De-/Re-encryption of HTTPS Traffic via Trusted "Man-in-the-Middle" technique
Complete Filtering of Encrypted HTTPS Sessions and their Contents via Astaro’s Dual AV Scanners
Stops Tunneling Programs from Abusing open HTTPS Ports
URL Filtering for HTTPS Sites
Automatic Validation of Server Certificates Prevents Users from (Un)intentionally Bypassing Certificate Warning Messages
Full CA Management
One-Click Deployment of Gateway Certificate
Granular Tuning & Exceptions

Available Platforms
	Astaro Security Gateway Hardware Appliances Our hardware appliances are purpose built, high-performance security devices. They integrate Astaro's security applications with a hardened Operating System on optimized Intel-compatible server systems that cater to every business size. This section details the series of Astaro Security Gateway hardware models available. Learn More..
	Astaro Security Gateway Software Appliance Our software appliances include the operating system and all security applications bundled within a single software image. While offering the same capabilities as the hardware platform, they can be easily installed on your hardware of choice - maximizing deployment flexibility. The Astaro Security Gateway software appliances are much easier and faster to set-up than software applications that require the installation of an operating system in advance.This section details the security applications available, technical information and deployment scenarios. Learn More..
	Astaro Security Gateway Virtual Appliance for VMware Our virtual appliances include a software appliance which has already been pre-installed and pre-configured for VMware environments. Being the first unified threat management product that has been certified as “VMware Ready”, it allows for the secure and easy deployment of an "all-in-one" security solution within a virtual environment. This section details the security applications available, technical information and deployment scenarios. Learn More..