Microsoft® Forefront® Threat Management Gateway (TMG) Administrator’s Companion

Chapter 20. HTTP and HTTPS Inspection

• The Web Proxy Application Filter 529

• Configuring HTTPS Inspection 534

• Configuring the HTTP Filter 550

• Summary 570

The main protocol used in the World Wide Web is HTTP. However, when this protocol was created, security was not a big concern. The traffic that transits the Web using HTTP is generally open and the content can be accessible to any user using a network sniffer. The Internet changed through the years from a research network (ARPANET) to a commercial network, which created the need to add a secure protocol to allow private information over HTTP; this is known as Secure Sockets Layer (SSL), and when used with HTTP, is known as HTTPS. Microsoft Forefront TMG is able to inspect traffic that uses HTTP and ...