Welcome to ISAserver.org

SSL Bridging and MacAfee SecurityShield

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Misc.] >> 3rd Party Add-ons >> SSL Bridging and MacAfee SecurityShield

Page: [1]

Message

<< Older Topic Newer Topic >>

SSL Bridging and MacAfee SecurityShield - 2.Feb.2005 6:06:00 PM

RuiFiske

Posts: 92
Joined: 8.Dec.2004
From: London
Status: offline

Hello All,

Correct me in I'm wrong, but isn't the whole point of SSL Bridging that the ISA Server can perform stateful inspection of packets that are bridged?

I have tried to get MacAfee SecurityShield to inspect SSL Bridged packets, but it seems that it is only doing HTTP (as well as SMTP and FTP).
"[Confused]"

Is this correct? If not, what do I need to do to correct it?

Surely at the point that they hit the HTTP filter, if they are being bridged, then they are HTTP packets, and so should be examined. Can anyone help with this?

Otherwise, I have to say that MacAfee SecurityShield does seem like a good product.

Thanks again, to all @ isaserver.org

Post #: 1

Featured Links*

RE: SSL Bridging and MacAfee SecurityShield - 20.Feb.2005 7:09:00 PM

Guest

you will securityshield patch 1

(in reply to RuiFiske)

Post #: 2

RE: SSL Bridging and MacAfee SecurityShield - 24.Feb.2005 5:49:00 PM

RuiFiske

Posts: 92
Joined: 8.Dec.2004
From: London
Status: offline

I've managed to solve this!

The version that you download off the McAfee website is not the latest version. You need the patch, which is not that easy to come by. This upgrades the ISA2K4FILTER.DLL to version 1.0.550. I don't know yet whether there is a more recent version.

Then it works a treat!

[Cool]

(in reply to RuiFiske)

Post #: 3

RE: SSL Bridging and MacAfee SecurityShield - 28.Feb.2005 6:27:00 PM

pwaldeier

Posts: 36
Joined: 18.Feb.2004
From: Pennsauken NJ
Status: offline

The latest patch is from February 25, 2005. It is a re-release of Patch 1 which the site recommends reinstalling over the old version of the patch.

The file name from the McAfee site is SSH10Patch1.
My overall experience with this product is very good. In installed very quickly and went to work right away.

PaulW

(in reply to RuiFiske)

Post #: 4