cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
368
Views
0
Helpful
1
Replies

IPS with HTTPS traffic

support
Level 1
Level 1

Hi,

Is there a way, if I have the private key for an SSL certificate , that I can load this into the ASA with an AIP SSM module and be able to see if there attacks over SSL to one of my web servers?

Thanks,

Brantley

1 Reply 1

mhellman
Level 7
Level 7

The short answer is no. Obviously, HIDS is one option. If you really need network IPS (i.e. inline protection), I think your options are pretty limited if you actually want to load private keys on the device. Googling returns only a McAfee product, but there may be others. Breach.com has a product that does this but it's not inline and not ips.

You can possibly solve this architecturally by putting reverse proxies out in front of your web servers and having SSL terminate there.

Review Cisco Networking products for a $25 gift card