Existing web security solutions focus on filtering threats within http channels. However, more and more web sites redirect users to https-encrypted tunnels for privacy reasons so existing security solutions are bypassed. Such applications include Google Search / Map / Mail / Drive / Doc / Plus / Chat / Youtube, Twitter, Facebook, Facebook Chat, Dropbox, Yahoo Mail, Microsoft Outlook (hotmail) / SkyDrive / Skype / Line... As cloud services prevail, researchers had indicated that more than 40% of traffic will be encrypted in https by 2015. Auditing and filtering web contents becomes an uneasy job but everyone pretends to be unaware of this issue because no solution is available. It¡¦s time to face the truth.

Auditing Https By Regulatory Compliance

APPLY HTTPS DECRYPTION TRANSPARENTLY

Famous regulatory compliance includes Sarbanes-Oxley, PCI-DSS, HIPAA, SEC, FINRA, FSA, IIROC, FERC, NERC, CFTC, NFA, ... in many sectors. All electronic communications of an organization should be logged, recorded, and archived for years. However, encrypted communications are difficult to be audited so criminals are prone to hide themselves inside https. Digital forensics inside https are required for organizations to conform to the above mentioned regulatory compliance to avoid liability issues.