From the course: Cisco Network Security: Content and Endpoint Security
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
TLS/SSL decryption
From the course: Cisco Network Security: Content and Endpoint Security
TLS/SSL decryption
- [Instructor] When dealing with threat management, we are going to run into encrypted traffic. There's ways that we can choose to handle our traffic that is encrypted using transport layer security or secure socket layer. We can block the encrypted traffic or examine it. We can even do selective examination if it for example comes from a website with a bad reputation. In order to examine the traffic, the system must decrypt it before examining it and then it can monitor for threats, examine for reputation, intrusion detection, access control and advanced malware protection. It then encrypts it and sends it off to the destination. Now of course it has to have the keys in order to do this so you really have to have control of your network. In this demo, I'm going to use Wireshark to show you what it looks like when traffic is encrypted and then after it's decrypted. One thing we are gonna talk about is the Cisco 2018 annual cybersecurity report illustrates a couple of key points. One…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.