Managed Detection and Response

SSL certificate extraction

To continue expanding the current 2x100G FlowProbe functionally, SSL Certificate extraction has been added to the layer 7 metadata options.

Written by

Team Nucleus

Content
Written on

6th March, 2020

SHARE ARTICLE

To continue expanding the current 2x100G FlowProbe functionally, SSL Certificate extraction has been added to the layer 7 metadata options.


Using the FPGA to perform deep packet inspection the system is able to identify packets containing SSL certificates. Certificates can vary in size but normally are in excess of 2kB, this results in it being spread across several packets. The FlowProbe is capable of delivering the whole certificate even when fragmented across multiple non-consecutive frames. Delivering the whole certificate enables the end-user to process any of the information they may require.

NUCLEUS

Recommended Posts

Subscribe to Nucleus blog updates.

Subscribe to our newsletter and stay updated.

Subscribe to Nucleus