cancel
Showing results for 
Search instead for 
Did you mean: 
lepa
Level 7

Modifying session ID in SSL

It is possible modify session ID in SSL by WebGateway ?

0 Kudos
2 Replies
McAfee Employee

Re: Modifying session ID in SSL

Hi Lepa!

Do you have an example use case why you desire this by chance?

I don't believe MWG can, but am curious what the story is behind the question

Best Regards,

Jon

0 Kudos
lepa
Level 7

Re: Modifying session ID in SSL

It`s a long story.

We have external service (https) and internal/external customers.

For security purposes we do not open ssl traffic for this service.

We need to know which accesses this service.

When we try to do this we existing logs (web gateway and web server) - we have to much similar records.

So main idea - manipulate session ID (add user name) without decryption of SSL.

0 Kudos