Live, interactive cybersecurity training available through SANS Live Online. View upcoming events.

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

Keeping Network Inspection Visibility in the Age of TLS 1.3: What To Do When The Network Goes Dark

  • Wednesday, March 25, 2020 at 3:30 PM EDT (2020-03-25 19:30:00 UTC)
  • Matt Bromiley, John Smith

Sponsor

  • ExtraHop

You can now attend the webcast using your mobile device!

  

Overview

Like it or not, TLS 1.3 is coming and will make network traffic opaque to inspection. This discussion will cover lessons learned from real-world, large-scale experience decrypting PFS-encrypted traffic and the various options available, including SSL fingerprinting, proxies and session-key forwarders installed on critical servers. Attendees will be able to formulate a strategy for retaining visibility into encrypted traffic that works for their organization.

Speaker Bios

Matt Bromiley

Matt Bromiley is a SANS digital forensics and incident response (IR) instructor, teaching FOR508 Advanced Incident Response, Threat Hunting, and Digital Forensics and SANS FOR572 Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response. He is also an IR consultant at a global IR and forensic analysis company, combining experience in digital forensics, log analytics, and incident response and management. His skills include disk, database, memory and network forensics; incident management; threat intelligence and network security monitoring. Matt has worked with organizations of all shapes and sizes, from multinational conglomerates to small, regional shops. He is passionate about learning, teaching and working on open source tools.


John Smith

John Smith is a Principal Engineer at ExtraHop. John has more than two decades of experience as a Senior Architect in IT organizations and is a regular speaker at technology events, including Briforum, RSAC and Citrix Synergy, among others.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.