Network IDS and SSL Traffic

[tscislaw_2]

If one has a web server on a link that is firewalled and only passes SSL traffic, is there ANY use to putting a Network IDS on that link (between the firewall and the host)? Are there any port 80/443 attacks that use the packet header?

[marcabal]

There are several attacks which can be executed which deal with the packet header information.

Some examples include IP Fragment attacks, Host and Port Sweeps, Floods, Session Hijacking, and several Denial Of Service attacks.