ScanSafe - ISR / ASA - HTTPS

[Jeffrey Behrns]

I am looking for some in depth documentation about how Cisco Cloud Web Security (formerly ScanSafe) scans / inspects HTTPS encrypted traffic.  Do the ScanSafe towers act as a "man in the middle"?  Any info is appreciated, otherwise I will have to figure it out the hard way a.k.a. packet capture.

[Luis Silva Benavides]

Hi Jeff,

Yes the tower will act as a man-in-the-middle. That is why the installation of a certitficate is required on the Scansafe portal.

http://www.cisco.com/en/US/docs/security/web_security/scancenter/sc5126/Administration.html#wp1056479

HTH,

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"

http://www.cisco.com/web/partners/tools/pdihd.html