SSL VPN Portal IPS Sensor

[rob_cart]

I' m wondering if anyone applies IPS protection to the policy that enables the SSL VPN portal to work ? I have created custom IPS profiles to protect say Microsoft web servers in my network but should i have create an IPS profile to protect the SSL VPN portal ? I would say it would be a good thing to do but as I' m not exactly sure what platforms are running here i.e i' m assuming linux OS ? Apache web server ? Any ideas or experience would be much appreciated ! Cheers Rob

[netmin]

Afaik, an interface policy did/does not perform deep inspection on SSL traffic and malicious hb request detection is a tls record layer pattern matching ips signature, isn' t it? I think it is worth, at least to us, following up on / evaluating the VIP->loopback variant, as already used by AtiT, also to present the portal on a different IP.

[FortiAdam]

Well it was the official work around that Fortinet posted so I hope it was sufficient. I confirmed via multiple methods that the SSL VPN portal was no longer vulnerable to heartbleed after applying the interface policy with the appropriate IPS sensor. At the bottom of the page here is where you can find a brief mention of this: http://www.fortiguard.com/advisory/FG-IR-14-011/