SSL Session show up as NAT

[cmihelich]

Running ENS with transparent redirect on WWW Service. I don't believe I've ever seen it work correctly on this box outside of a test server I have running. All SSL sessions show up as NAT: IP:443 and policies pertaining to server name have no effect since they're always seen as IP addresses.

[genie]

By default transparent redirect intercepts only traffic destined to port 80 - if you want to intercept other ports, like 443, you have to add this port using Sessions window in WWW proxy properties. However, since SSL is a secured chanel, this interception does not provide any effect because SSL traffic is neither cached nor filtered.

[cmihelich]

I don't want to intercept the port. I would like it to pass through but isn't it usually shown under the activity tab as SSL and the website name. All I see is NAT and the ip x.x.x.x:443

[genie]

Aye, because it goes through NAT only and NAT does not differentiate between the application protocols - it just knows that there is traffic from the client to x.x.x.x, port 443. It is only when the traffic goes through proxies that they can say that this traffic is SSL or HTTP or something rather.

[cmihelich]

So only if the browser is set to use Wingate as the proxy it will display it under the activity page as SSL instead of NAT

[genie]

Absolutely correct.

[cmihelich]

Appreciate the knowledge.