HSC - Presentations - SSL VPN connection multiplexing techniques

Network Security Consulting Agency Since 1989 - Specialized in Unix, Windows, TCP/IP and Internet

Hervé Schauer Consultants

You are here: Home > Resources > Lectures > SSL VPN connection multiplexing techniques

Go to: HSC Trainings

			Skills & Expertise
			Consulting
			ISO 27001 services
			Vulnerabilities monitoring
			Audit & Assessment
			Penetration tests
			Vunerability assessment (TSAR)
			Forensics
			ARJEL
			Training courses
			E-learning

			Agenda
			Past events
			Tutorials

			Thematic index
			Tips
			Lectures
			Courses
			Articles
			Tools (download)
			Vulnerability watch

			Hervé Schauer
			Team
			Job opportunities
			Credentials
			History
			Partnerships
			Associations

Press and
communication

			HSC Newsletter
			Press review
			Press releases
			Publications

			How to reach us
			Specific inquiries
			Directions to our office
			Hotels near our office


		SSL VPN connection multiplexing techniques

Access to the content

Beginning of the presentation

PDF version [600 KB]

Description

Describing non-standard techniques usually implemented by vendors in order to multiplex generic protocols (SOCKS-based techniques, HTTP encapsulation and PPP/SSL encapsulation) in a single tunnel, and how they bypass Firewalls (CONNECT HTTP method) to achieve this objective. Describing demonstrations of tools (ssldump, httptunnel etc.) used to understand SSL VPN internals. (30 min)

Context & Dates

Talk presented during Upperside SSL VPN Conference 2005, on 7 April 2005.

Author

Franck Davy

Type

[

-

]

Abstract &
Table of content

Flyleaf
Agenda
Proprietary IPsec Solutions
Port Forwarding
Tunnel management protocols
HTTP Tunneling Filtering
SSL VPN traffic analysis
Conclusion
References

Related documents

VPN (Virtual Private Networks)

SSToPer tool [A Linux implementation for SSTP client -

]

Tunnels detection at network border [2 June 2006 -

]

Détection de tunnels aux limites du périmètre [2 June 2006 -

]

SSLtunnel for Windows [22 September 2004 -

]

SSLTunnel : VPN for roadwarriors [4 February 2004 -

]

SSLTunnel tool [PPP VPN on SSL -

]

IP VPN with IPsec tunnels [12 September 2001 -

]

How to insert VPNs in existing security architectures? [29 September 1999 -

]

Protocols for tunneling and network security [29 September 1999 -

]

Encrypted tunnels with Linux [18 June 1999 -

]

SSL (Secure Socket Layer)

Data Exchanges Security: IPsec, SSL, SSH

Tunnels detection at network border [2 June 2006 -

]

Détection de tunnels aux limites du périmètre [2 June 2006 -

]

Firewalls are not dead [10 May 2005 -

]

SSLtunnel for Windows [22 September 2004 -

]

FTP over SSL [2 August 2004 - ]

SSLTunnel : VPN for roadwarriors [4 February 2004 -

]

SSLTunnel tool [PPP VPN on SSL -

]

HTTP/HTTPS authentication methods [10 March 2003 -

]

OpenSSL and applications of OpenSSL [6 November 2002 -

]

Monkey in the Middle Attacks against SSH and HTTPS [23 January 2002 -

]

Apache: Virtual hosts and SSL (mod_ssl) [21 December 2001 -

]

Using OpenSSL for SSL/TLS applications [21 December 2001 -

]

Why HTTPS is not web security [7 May 2001 -

]

Monkey in the middle attacks against SSH and HTTPS [6 February 2001 -

]

Instaling postfix with TLS (secure mail server) [30 November 2000 -

]

Network encryption: IPsec, SSL, SSH [26 September 2000 -

]

SMTP-TLS: Towards securing SMTP [11 September 2000 -

]

Network Encryption: IPsec, SSL, SSH [26 April 2000 -

]

Network Security with Linux: SSL, IPsec, SSH [1 February 2000 -

]

Secure Socket Layer (SSL) [22 April 1997 -

]

SSH (Secure SHell)

Data Exchanges Security: IPsec, SSL, SSH

OpenSSH client for ease, fun and ... profit [21 August 2007 -

]

SSH and X11 forwarding [27 September 2004 - ]

Monkey in the Middle Attacks against SSH and HTTPS [23 January 2002 -

]

Remote administration of Windows systems (Part 1) - SSH [19 November 2001 -

]

Installing OpenSSH under Solaris [29 October 2001 -

]

Chrooting an account with OpenSSH [23 April 2001 -

]

Secret SSH [20 April 2001 -

]

Monkey in the middle attacks against SSH and HTTPS [6 February 2001 -

]

Network encryption: IPsec, SSL, SSH [26 September 2000 -

]

Network Encryption: IPsec, SSL, SSH [26 April 2000 -

]

Network Security with Linux: SSL, IPsec, SSH [1 February 2000 -

]

Encrypted tunnels with Linux [18 June 1999 -

]

SSH - Secure SHell [13 September 1995 -

]

Web Servers and applications Security

Webef tool [Bruteforcer of web server files and directories -

]

Webshells, or how to open your network's doors ? [21 October 2010 -

]

JBoss AS: exploitation and reassure [11 June 2010 -

]

Webshells, or how to open your network's doors ? [16 March 2010 -

]

Webshells, real threat for information systems ? [1 December 2009 -

]

Security issue seen in enterprises web applications [27 November 2008 -

]

Application security [23 October 2008 -

]

Feedback from PHP applications assessment [21 November 2007 -

]

Evolution of Cross-Site Request Forgery Attacks [1 June 2007 -

]

Encrypting hostile Web content over HTTP [31 May 2007 -

]

Web 2.0 : more ergonomic... and less secure ? [22 May 2007 -

]

Configuring and using modsecurity2 [24 April 2007 -

]

Presentation of Apache ModSecurity module [14 June 2006 -

]

Database and ERP security [15 June 2005 -

]

PHP and security [27 November 2003 -

]

Web Services and Security [10 September 2003 -

]

HTTP/HTTPS authentication methods [10 March 2003 -

]

The cross-site scripting [27 February 2003 -

]

DBMS and security [1 April 2002 -

]

Apache and web servers security [1 February 2002 -

]

Implementing filtering on a reverse HTTP proxy using mod_eaccess [3 September 2001 -

]

Subweb tool [HTTP reverse proxy -

]

Babelweb tool [Automatic information retrieving from of a web server -

]

Universal CGI wrapper [5 August 2001 -

]

Why HTTPS is not web security [7 May 2001 -

]

Filtering URLs in a reverse proxy [5 May 2001 -

]

Hacking web servers [14 March 2001 -

]

Why a reverse proxy [13 February 2001 -

]

Apache as a reverse proxy [11 November 2000 -

]

Secure internet services (email, DNS, web) under Linux [26 September 2000 -

]

Secure internet services (email, DNS, web) under Linux [26 April 2000 -

]

Secure Internet services (email, DNS, web) under Linux [1 February 2000 -

]

Netscape [16 January 1996 -

]

Network Security

Forcasting in French cyberdefence doctrines [24 November 2010 -

]

IPv6 Networks Discovery [30 May 2007 -

]

IPv6: Network Security Threats [15 November 2006 -

]

IPv6: impacts and threats [14 November 2006 -

]

Manage IS security of wide enterprise [12 April 2005 -

]

Stakes of network security [31 March 2005 -

]

Ethereal: an open-source network analyzer and a must-have security tool [2 February 2005 -

]

Network security stakes [14 October 2004 -

]

CanSecWest 2002 Conference [4 May 2002 -

]

Network security: Introduction and Bluetooth [9 November 2000 -

]

Networks Security [25 July 2000 -

]

Policy managment for network security [29 May 2000 -

]

Firewalls, protection and supervision, VPNs: situation of the security tools market [20 January 2000 -

]

TCP/IP Networks Security [25 November 1999 -

]

Network security: intrusion risks and countermeasures [18 November 1999 -

]

Network security techniques [6 March 1997 -

]

Copyright

© 2005, Hervé Schauer Consultants, all rights reserved.

Last modified on 8 April 2005 at 17:39:46 CET - webmaster@hsc.fr
- © 1989-2010 Hervé Schauer Consultants