Peer inside encrypted sessions for damaging contents.

A secure surfing session protects user data and privacy, but threatens the security of the company. Sites visited and files downloaded over HTTPS can contain malicious content that can enter the network while the security device remains blind. Astaro’s HTTPS filtering removes this unwanted network blind spot and gives you full visibility into this traffic.

 

Descriptions & Screenshots HTTPS Scanning

HTTPS is a secure connection usually made between the user’s browser and a target website. Web masters use HTTPS in their sites so that file sharing and even home-user sites can make use of HTTPS.

Astaro’s HTTPS filtering can examine inside encrypted streams using an advanced man-in-the-middle approach to provide a full range of control. Acting as a trusted authority which can be deployed by download, email attachment or directory policy push, Astaro is able to completely scan HTTPS.

URL filtering can be performed on the sites accessed and Astaro can also look deep inside the stream itself and identify viruses, spyware and malicious content that is being accessed over HTTPS. This provides great protection should a site that is trusted become compromised and start serving malicious content over HTTPS, as Astaro will still be able to stop it. Programs which tunnel over HTTPS, like anonymous surfing or crafty instant message programs will no longer be allowed to connect.

 


 

Available Platforms

Astaro Security Gateway Hardware Appliances

Astaro Security Gateway Hardware Appliances

Our hardware appliances are purpose built, high-performance security devices. They integrate Astaro’s security applications with a hardened Operating System on optimized Intel-compatible server systems that cater to every business size. This section details the series of Astaro Security Gateway hardware models available.

Astaro Security Gateway Software Appliance

Astaro Security Gateway Software Appliance

Our software appliances include the operating system and all security applications bundled within a single software image. While offering the same capabilities as the hardware platform, they can be easily installed on your hardware of choice – maximizing deployment flexibility. The Astaro Security Gateway software appliances are much easier and faster to set-up than software applications that require the installation of an operating system in advance.This section details the security applications available, technical information and deployment scenarios.p

Astaro Security Gateway Virtual Appliance for VMware

Astaro Security Gateway Virtual Appliance for VMware

Our virtual appliances include a software appliance which has already been pre-installed and pre-configured for VMware environments. Being the first unified threat management product that has been certified as “VMware Ready”, it allows for the secure and easy deployment of an "all-in-one" security solution within a virtual environment. This section details the security applications available, technical information and deployment scenarios.

 


 

Technical Information

Astaro’s HTTPS Scanning offers fully transparent content filtering even for encrypted web sessions protecting against abuse, infection, and unwanted surfing activity over HTTPS.

  • Transparent De-/Re-encryption of HTTPS Traffic via Trusted "Man-in-the-Middle" technique
  • Complete Filtering of Encrypted HTTPS Sessions and their Contents via Astaro’s Dual AV Scanners
  • Stops Tunneling Programs from Abusing open HTTPS Ports
  • URL Filtering for HTTPS Sites
  • Automatic Validation of Server Certificates Prevents Users from (Un)intentionally Bypassing Certificate Warning Messages
  • Full CA Management
  • One-Click Deployment of Gateway Certificate
  • Granular Tuning & Exceptions