Topic: mod_security + apache reverse proxy + ssl?

[flyingmonkey]

Hi All,

Can I add mod_security into an apache reverse proxy to inspect SSL traffic before it reaches a backend portal server?

Here's a "diagram" of my environment:
Client --SSL--> Reverse Proxy (domain.com) --SSL--> Portal Server (internal.com)

I have a secure reverse proxy setup, but would like to inspect the traffic with IDS/IPS before it reaches the Portal Server. Is it possible, since the traffic is encrypted? Any sample configurations is appreciated.

Thanks,

-FlyingMonkey

[Steffen]

Maybe you can ask it too at the mod_secuiry mail list at https://lists.sourceforge.net/lists/listinfo/mod-security-users

Steffen

[flyingmonkey]

thanks for the advice. =)

i got an answer back but it wasn't definate. It seems like it should work though, since the SSL traffic is decrypted.