WatchGuard Deep Packet Inspection
Get assistance configuring HTTPS/SSL Scanning on your WatchGuard firewall.
An alarming increase in ransomware has been occurring across the world for the past several years. Things like BitLocker and Locky to name a few, have been wreaking havoc on networks and organizations forcing them to pay large sums of money to restore their data. Sure, sometimes a robust backup system can fix this, but why let it get that far?
Hackers are using SSL (HTTPS) to get malware through firewalls and past virus scanners.
HTTPS traffic, when it was first utilized in the 1990s, was a godsend. A way to send protected, safe and private traffic across the internet seemed too good to be true.
And unfortunately, it is. Now unethical website registration companies can provide nearly anyone with an SSL certificate, hackers now have a way to get past your filters, hackers are able to easily send ransomware disguised as legitimate traffic through firewalls and past security measures. This all happened because HTTPS traffic is not scanned the same way that normal HTTP traffic is.
Most security appliances and providers have dropped the ball on this one. It's too easy to get a hold of these certificates to get malicious traffic through a network and hold companies information for ransom. And with other "services" like poodlecorp, you can take down a network quickly with a purchased DDoS attack. No hacking ability required. Fortunately, there is a solution.
WatchGuard firewalls come with a feature called Deep Packet Inspection, or DPI for short. However, it is not easy to configure and install in a way to make it seamless for your users. We have solved this issue and can scan HTTPS traffic using the services you're already paying for on your firewall, webBlocker, Gateway AntiVirus, and the rest. Here's what we do:
Using DPI and our own custom methods, we configure the WatchGuard firewall to instead look at all traffic passing through the network onto your devices. Windows, Mac, iOS, Android and Linux are all covered. Then we can add an extra layer of protection that most of us have lost using HTTPS. This involves several steps to get to work, but our experts know how to make it happen.
Get Started Below!