Clear Tunnel Close the SSL Hole Copyright

Clear. Tunnel Close the SSL Hole! Copyright © 2008 Collective Software, LLC

ISA Proxy: HTTP -- LAN -ISA Server and Web Filters Internet Web client HTTP ? ? ? OK Top Secret !! Content Filters Anti. Virus Data Loss Prevention OK ? ? ?

ISA Proxy: SSL -- LAN -ISA Server and Web Filters Internet Web client HTTPS ? ? ? Blind SSL Tunnel No filtering possible! ? ? ? Top Secret !!

ISA Proxy with Clear. Tunnel -- LAN -ISA Server and Web Filters Web client HTTP ? ? ? OK OK ? ? ? Top Secret HTTPS !! ? ? ? OK Web Filters SSL Server SSL Client HTTPS OK ? ? ? Internet

Clear. Tunnel Architecture SSL Web Servers ISA Server and Web Filters server 1 HTTPS Web Filters Plain HTTP SSL Client OK ? ? ? server 2 server 3

Clear. Tunnel Architecture Active Directory Certificate Services Root el D ISA Server and Web Filters eg at e SSL Server server 1 server 2 server 3 Plain HTTP Web Filters

Clear. Tunnel Architecture Active Directory Certificate Services Root ISA Server and Web Filters Trust HTTPS ? ? ? OK SSL Server Web client server 1 server 2 server 3

Clear. Tunnel Architecture Active Directory Certificate Services Root SSL Web Servers el D ISA Server and Web Filters eg at e Trust server 1 HTTPS ? ? ? OK HTTPS SSL Server Web Filters SSL Client OK ? ? ? Web client server 1 server 2 server 3