What is SSL Inspection? Why use SSL inspection?

SSL Inspection or HTTPS Inspection is the process of intercepting SSL encrypted internet communication between the client and the server. The interception can be done between the server and the client and vice-versa. 

We know that SSL encryption helps our crucial data safe. Every bit of data is encrypted, such that data tampering or 3rd party intervention is not possible. However, that is not the case now. SSL can now be used to hide several Malware (Malicious Software), that goes unnoticed when SSL tries to detect it.  

That’s where SSL Inspection comes into the picture. SSL Inspection intends to filter out dangerous content, such as malware. This inspection is also called Deep SSL Inspection or Full SSL Inspection. It allows the user to do Web filtering, Email filtering, antivirus scanning, etc. 

So, how does this SSL Inspection remove the malware? 

Basically, SSL uses an interception device between the server and the client. The interceptor device sits between the server and the client and all the traffic goes through it. When the connection is made to the web server, the interceptor intercepts all the traffic going through, decrypts it and scans it.

Once the scanning is done, then it forms another SSL connection with the client. So, the data is sent to the client via encryption. 

Here’s an overview of SSL Inspection: 

• First, the interceptor intercepts the traffic coming and decrypts HTTPS sessions between clients and servers. 
• Once the traffic has been decrypted, the interceptor inspects the content through antivirus scanning, web filtering, etc. 
• Then the interceptor encrypts the traffic and forwards it to the destination, in this case, the web server. 

Source

Sponsor Ads

• Ad Space Available - Rent it Now!

Report this Page

Created on Jan 11th 2020 11:23. Viewed 163 times.

Share on APSense

Comments