Websockets - Is the data observable by the ironport

[brianhill88]

Hello,

Some of our web devs want to start using websockets.  We are using Ironport S670's running 7.5.2.  I enabled HTTP Connect ports under Protocol Controls under the default policy so that it works.  My question is do the Ironport's have insight into that traffic the same way that they do with HTTPS traffic or is the data completely obscured by the tunnel that is created with the Websocket?

Thank you,

Brian

[brianhill88]

I have the answer to this. The data is completely obscured.

Exerpt from a PDF on HTTP Connect (Method the Web Socket is initiated with) that I received from our rep:

Please also note that WSA would not understand the protocol which is being used under HTTP, (except HTTPS when

using HTTPS decryption) although the traffic is seen, it would not able to inspect what's being transmitted.

[Nathan Pachal]

Did you ever get Web Sockets working thru the WSA?