topic Re: Pcap VPN SSL in General Topics

Pcap VPN SSL

BigPalo — Thu, 19 Mar 2020 15:53:04 GMT

Hi,

Is there any way to take a pcap in plain text about a VPN-SSL connection?

jdelio — Thu, 19 Mar 2020 19:39:32 GMT

@BigPalo Are you wanting to capture the un-decrypted traffic?

Have you been able to get any captures yet?

OtakarKlier — Thu, 19 Mar 2020 21:05:16 GMT

Hello,

You can get ssl decrytped traffic, but if the PAN is the client VPN endpoint. I dont know of a way.

Regards,

jdelio — Thu, 19 Mar 2020 21:59:16 GMT

Just like @OtakarKlier stated, because the firewall is the endpoint, it may not be possible.

You may end up having to mirror a port and then perform a wireshark capture if you want to see the raw ssl traffic.