DPI Support for SSH Applications

Endpoint Protector Endpoint Protector Ideas
,
4

Hello @Julia,

Unfortunately, nothing has changed here. SSH/WinSCP tunnels remain non-decryptable.

My previous response is still valid. We offer the following options:

  • Control file operations by application: you can restrict file operations performed by the WinSCP application, which stops files from being inserted into the tunnel.
  • Control application usage: you can block WinSCP from starting at all.
  • Block SSH GitHub tunnels: starting with Client 2605, we offer an option to block SSH GitHub tunnels.

This item is on our radar to be addressed. However, it is mainly a technical limitation of the SSH protocol itself, so we can’t commit to a timeline.