topic HTTP Tunneling in General Topics

HTTP Tunneling

snormoyle — Tue, 03 Jan 2012 15:55:56 GMT

Wondering how the Palo Alto detects HTTP tunneling and how would a security policy be configured to detect/prevent this situation.

Re: HTTP Tunneling

rmonvon — Tue, 03 Jan 2012 17:44:21 GMT

Can you describe what you means by HTTP tunneling?

Currently there are 42 proxy applications like phpproxy, http-tunnel, freegate, etc. For example, the phpproxy app will detect anonymizer sites that are based on php engine.

Thanks.

Re: HTTP Tunneling

snormoyle — Wed, 04 Jan 2012 08:01:14 GMT

I am referring to the http connect tunnel

Re: HTTP Tunneling

rmonvon — Wed, 04 Jan 2012 14:27:01 GMT

For HTTP connect, the app is http-proxy as the connect method is employed between the browser and a proxy server. So to block HTTP connect, you would deny http-proxy.

Thanks.