Thanks for the information, i am trying to inspect the traffic with sniffers to match web mail traffic and create a new rule on the G200 to block these traffic
-----Mensaje original----- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de Soldatov, Sergey V. Enviado el: viernes, 13 de enero de 2006 9:18 Para: Massimo; Claudia Patricia Prada Guzman CC: [email protected] Asunto: Re: [ISSForum] Inspect web mail > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Massimo > Sent: Monday, January 09, 2006 1:33 PM > To: Claudia Patricia Prada Guzman > Cc: [email protected] > Subject: Re: [ISSForum] Inspect web mail > > Claudia Patricia Prada Guzman wrote: > > Some body knows how to inspect web mail (GMAIL, telcomails > ) using Porventia G.? > > These equipment has two signatures that inspect attached > files, but if I want to create a new signature using GMAIL, > what do should I do ? > > You should ask gmail not to use SSL for their web mail. > > You can't analize/block https connection (you can do it with > hotmail, yahoo because they are clear text http). You can analyze/block https connection if your Proventia G can perform Man-In-The-Middle attack against SSL. I know some products that can do this (for example WebWasher CSM's SSL scanner). Of course advanced users will see this, but this can be solved administratively. Can Proventia G scan SSL-traffic performing MITM-attack? > > Best Regards, > Massimo > > _______________________________________________ > ISSForum mailing list > [email protected] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo/issforum > > To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] > > The ISSForum mailing list is hosted and managed by Internet > Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. > --- Best regards, Sergey V. Soldatov. Information security department. tel/fax +7 495 745 89 50 tel +7 495 777 77 07 (1613) _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
