This feature, called Deep Packet Inspection (DPI), just has to be configured to ensure your HTTPS traffic is safe. Your WatchGuard firewall is capable of scanning this HTTPS content completely, and at no extra licensing fee.
The good news is that not all hope is lost when it comes to protecting ourselves from the potential dangers of unscanned HTTPS sites. We, assuming that HTTPS sites are safe, visit these sites without realizing the potential dangers lurking there. These attackers know that most firewalls can’t review all the data on an HTTPS site, so they use them to infect our networks. The increase in ransomware, things like Cryptowall, Locky and BadRabbit, have been made worse because they are being distributed through HTTPS sites. This wouldn’t be such a big issue, except for the fact that attackers know this. Because these sites are encrypted, it is nearly impossible for a firewall, in its base configuration, to be able to review the data. While HTTPS sites in general are more secure, there’s another side of the issue. The estimation is that, by the end of 2019, over 90% of all web traffic will be HTTPS. This is because HTTPS encrypts the data, so sites like Amazon, Facebook, and your bank website can protect your personal or payment information. As more and more of our day-to-day activities start to rely on Internet access, that trend has been changing to more sites using HTTPS (443). This is considered basic web traffic, and can be monitored easily by firewalls. Many years ago, if you visited a site, you were most likely accessing it over HTTP (port 80). There is a growing trend when it comes to websites.
0 kommentar(er)
