Secure Computing SSL Scanner Manual do Utilizador descarregar pdf (Página 15)

Figure 12 illustrates the Blue Coat ProxySG Reverse HTTPS Solution.

Internet

SSLSSL

Users

Corporate Headquarters

Reverse HTTPS Proxy

• Web Server Acceleration

• Content Delivery Optimization

• Malware Detection

• Data Loss Prevention

ProxyAV

ProxySG &

Web Server

Figure 12 – Blue Coat ProxySG Reverse HTTPS Solution

Blue Coat ProxySG appliances can triple a website’s throughput and cut user response times by 50-80 percent while increasing

the security and control of SSL transactions. This allows a website to serve more content and process more transactions

through the existing server infrastructure, as well as keep better track of SSL connections and apply policy to intercepted

HTTPS trafﬁc. The ProxySG can negotiate 10-40 times more new SSL connections than a standard web server; supporting up

to 7000 new SSL transactions per second, and up to 19,000 maximum existing connections. The ProxySG can process both

HTTP (public) content and HTTPS (private) content and support several origin servers from multiple secure sites at one time.

Each origin server may have its own certiﬁcate loaded onto the appliance. Blue Coat ProxySGs ship with validation certiﬁcates

from all major Certiﬁcate Authorities (CAs), which validate the origin server certiﬁcates. Customers can then add their own

certiﬁcates for each original domain. Blue Coat appliances support all major CAs for origin server certiﬁcates.

Blue Coat ProxySG appliances also offer the ability to establish “back-end” SSL sessions with the origin server to support

content distribution via global web server acceleration. In a back-end SSL session, the Blue Coat appliance encrypts the

channel back to the origin server. The primary beneﬁt to this is that organizations may deploy the Blue Coat ProxySG away

from the origin server, which allows them to deploy secure data in a distributed manner. By establishing back-end SSL

sessions, the Blue Coat ProxySG allows content distribution networks (CDNs) to support encrypted trafﬁc. In such deployments

back-end session reuse continues to lower the computational cost of SSL on the web server. In addition, by encrypting the

channel between the Blue Coat ProxySG appliance and the origin server, an additional layer of security is achieved.

Technology Primer: Secure Sockets Layer (SSL)

1 2 ... 10 11 12 13 14 15 16 17 18 19 20 21 22

Sem comentários

Secure Computing SSL Scanner Manual do Utilizador Página 15