(Disclaimer: I resell some Barracuda products to my clients)
As far as I can tell, Barracuda's Web Filter does this. From the section of the help file associated with HTTPS filtering:
[snip]
HTTPS Filtering
You can expand HTTP filtering to include HTTPS filtering. HTTPS traffic can be detected by content category filters and domain filters, as well as by blocking exceptions for all Web traffic, content category filters, and domain filters. This option is disabled by default.
Limitations for enabling HTTPS traffic filtering:
When HTTPS access is denied, the user will NOT be presented with a block page.
If HTTPS access to a particular domain name is denied, HTTPS access to any subdomain of that same domain will also be denied for the same users.
If filtering is set to Warn, the HTTPS request will be blocked instead.
For URL pattern filters, only the unencrypted portion of the requested HTTPS URL can be checked for a match with the specified pattern.
To enable HTTPS traffic filtering for content categories and domains:
Set the Enable HTTPS Filtering option to Yes.
When this option is enabled, filters created using the following mechanisms will block HTTPS traffic:
Content filters (both built-in and custom)
Domain-based filters
URL pattern filters (only the unencrypted portion of the requested URL can be checked)
Blocking exceptions to All Web Traffic or for either of the above types of filters
Note: Immediately after you enable this option, any client machines that had previously established an HTTPS session are communicating with an IP address and will not be blocked. In this situation, the HTTPS Web site IP address remains in the DNS client resolver cache (as well as in the DNS table on the core router or domain controller) until the DNS request time-to-live (TTL) expires. This can take up to a day or two, depending upon how the HTTPS sites configure TTL.
[/snip]
I interpret the above to mean that MITM style filtering is an option for the content filters, but (oddly enough) not for the URL pattern filters. You might want to talk to your vendors or suppliers about bringing one in - Barracuda is very good about giving free 30 day trials.
I suspect that with the above system, there would be a different exception thrown for "no TCP/IP network access available" vs. "app is denied access to TCP/IP stack".
How does your IP configuration (IP and netmask would be the interesting bits) and routing table change when the handoff occurs?
I wish my local carriers had some kind of LTE gear up on their towers. Unfortunately, Canada is turning into a technological backwater as far as mobile data goes...
Asterisk: Free if you can squeeze a VM in an under-utilized server. Or you could do it up in a desktop that's still viable but has been cycled out of production.
SIP trunks: Cheaper than land lines.
Soft phones: Free.
Logitech headsets: $10 per seat. Or basic VoIP handsets at around $90 each if purchased in bulk.
I don't recall who said this, but my favorite explanation for the English language is "It's the bastard offspring of Norman raiders trying to pick up Saxon barmaids.":-)
Slashdot Mirror
Oddly enough, we're in the same boat.
I'm not the musician who goes by Kompressor, although I have listened to and been confused by his work.
How many others on here have the same situation?
Wasn't there an Australian dating site that did just this?
A java program that takes the 'Write once, run anywhere' mantra to the next level.
Are you sure they weren't thinking "Write once, run everywhere"?
So what does this do to Rock-Paper-Scissors?
Stick them in the document feeder of an office copy machine.
Push the green button.
Porblem solved.
Restoring the backup is an exercise left to the reader.
(Disclaimer: I resell some Barracuda products to my clients)
As far as I can tell, Barracuda's Web Filter does this. From the section of the help file associated with HTTPS filtering:
[snip]
HTTPS Filtering
You can expand HTTP filtering to include HTTPS filtering. HTTPS traffic can be detected by content category filters and domain filters, as well as by blocking exceptions for all Web traffic, content category filters, and domain filters. This option is disabled by default.
Limitations for enabling HTTPS traffic filtering:
To enable HTTPS traffic filtering for content categories and domains:
Set the Enable HTTPS Filtering option to Yes.
When this option is enabled, filters created using the following mechanisms will block HTTPS traffic:
Note: Immediately after you enable this option, any client machines that had previously established an HTTPS session are communicating with an IP address and will not be blocked. In this situation, the HTTPS Web site IP address remains in the DNS client resolver cache (as well as in the DNS table on the core router or domain controller) until the DNS request time-to-live (TTL) expires. This can take up to a day or two, depending upon how the HTTPS sites configure TTL.
[/snip]
I interpret the above to mean that MITM style filtering is an option for the content filters, but (oddly enough) not for the URL pattern filters. You might want to talk to your vendors or suppliers about bringing one in - Barracuda is very good about giving free 30 day trials.
And if the browser doesn't accept the proxy's cert, the proxy doesn't accept the browser's traffic. Problem solved, all your bits are belong to us.
Is that you, Pa Kettle?
This CPU will let you stand over noobs' exploded corpses.
Indeed! In comparison to this, all other CPUs are just droopy eyed armless children.
I suspect that with the above system, there would be a different exception thrown for "no TCP/IP network access available" vs. "app is denied access to TCP/IP stack".
I believe you just described the mother of all money laundering services.
I'm not sure that such a transaction would be legal.
OTOH, plump, farm-raised, hormone-injected turkeys? I guess they can't fly.
They also can't mate. Too much bird gets in the way. I can't make this shit up... Do not stroke the tom more than twice.
Yay for having a fiance in her last year of a Bachelor of Animal Science degree... Imagine what I'll learn when she goes for her Master's...
If staring at a Magic Eye leaves one with a splitting headache, what would that do? :-/
Interesting!
How does your IP configuration (IP and netmask would be the interesting bits) and routing table change when the handoff occurs?
I wish my local carriers had some kind of LTE gear up on their towers. Unfortunately, Canada is turning into a technological backwater as far as mobile data goes...
Your wish is my command: http://vimeo.com/18079655 Sure, it's just a concept, but...
So they're charging extra for most of Quebec, half of New Brunswick, and random small towns on the prairies? Inconceivable!
Ugg, you poor sod...
Here's hoping your employer puts someone competent in charge before the whole mess implodes on itself!
/raises a glass of good Scotch whiskey
Asterisk: Free if you can squeeze a VM in an under-utilized server. Or you could do it up in a desktop that's still viable but has been cycled out of production.
SIP trunks: Cheaper than land lines.
Soft phones: Free.
Logitech headsets: $10 per seat.
Or basic VoIP handsets at around $90 each if purchased in bulk.
You can have your cake and eat it too.
And for God's sake, DON'T cross the beams!
From the "My killbot features Lotus Notes" department, eh?
I don't recall who said this, but my favorite explanation for the English language is "It's the bastard offspring of Norman raiders trying to pick up Saxon barmaids." :-)
The premier's birthday, IIRC.
He loves surprises...
I don't know about you, but I wouldn't want to be the guy up in orbit holding the catcher's mitt...
If the targeting is off just a weeeincy bit, bang, zoom, straight to the moon!
Every time one of his dorm-mates uses Call of Duty as a coaster...
One can barely begin to imagine the destructive power of a gaggle of college boys...
"Who will rid me of this turbulent wikileaks?", eh?