In one embodiment, a traffic inspection service executed by an intermediary device obtains, from a monitoring agent executed by an endpoint device, keying information for an encrypted traffic session between the endpoint device and a remote entity. The traffic inspection service provides a notification to the monitoring agent that acknowledges receipt of the keying information. The traffic inspection service uses the keying information to decrypt encrypted traffic from the encrypted traffic session. The traffic inspection service applies a policy to the encrypted traffic session between the endpoint device and the remote entity, based on the decrypted traffic from the session.


    Access

    Download


    Export, share and cite



    Title :

    Endpoint-assisted inspection of encrypted network traffic


    Contributors:

    Publication date :

    2022-04-19


    Type of media :

    Patent


    Type of material :

    Electronic Resource


    Language :

    English



    The Quality of Video Communication in Encrypted Traffic

    Łubkowski Piotr / Laskowski Dariusz | DOAJ | 2020

    Free access

    CENTIME: A Direct Comprehensive Traffic Features Extraction for Encrypted Traffic Classification

    Maonan, Wang / Kangfeng, Zheng / Ning, Xinyi et al. | IEEE | 2021




    Adversarial Sample Attack and Defense Method for Encrypted Traffic Data

    Ding, Yi / Zhu, Guiqin / Chen, Dajiang et al. | IEEE | 2022