Very annoyed.
-
I tried posting in two different groups. Even edited my post but was blacklisted by askismet as $p@m.
-
@fg try it now - I have rep'd up a few of your posts so you now have 5 rep points.
-
@johnpoz said in Very annoyed.:
@fg try it now - I have rep'd up a few of your posts so you now have 5 rep points.
Well, I tried still doesn't work... This is a partial of the post if it helps tune the aksimet.
000000000000000000000000000000000000000000000000000
... to drop an idea going back 20 years.
I had the pleasure of using an M$ product back in the day - an I$@ Server 2003(?) ...
Enough beating around the bush. That firewall had client software that installed allowed the firewall to intercept https traffic, analyze and relay encrypted both ways.
I want snort to analyze my http traffic again. Not VPN or other secured traffic but just http since so much traffic is that protocol and to me it represents the greatest weakness.
As I recall a client would https out, then ISA would use its assigned certificate to represent the client outbound and inbound would re-encrypt to the client. Some clients could be forced to traffic through this "man in the middle attack" while others could be allowed to bypass the process.
The other thing that ISA was great at was scrolling live packets both allowed and blocked seemingly real time. Like netmon/wireshark do (sans the FW processing). I really used that function of watching traffic like that. There was a very sophisticated filtering function so that live you could analyze traffic.
Pfsense on login, when the firewall log is on the dashboard takes a very long time, so I had to remove that widget. Woes me. ;0)
-
@johnpoz Now it worked. Please delete these two posts at your convinience. My <dev> post did take.
-
@fg said in Very annoyed.:
This is a partial of the post if it helps tune the aksimet.
The problem is there is no "tuning" there is no way to whitelist a user or an IP, etc. It's pretty much a black box.. Really the only thing we can do is rep someone up to 5 which normally fixes the problem where people are blocked.
-
@johnpoz Appreciate your time. :0)
