Decryption on ECA


#1

Trying to get time series metrics/dashboards on the users login into the ECA for two different customers.
The attempt consists of getting the ‘username’ parameter out of the post data sent at login but can’t decrypt the SSL traffic with the following being used: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.

Is there a way to change what cipher can be used on the ECA to accommodate decryption?


#2

Decrypting logins to the ExtraHop appliance is not supported.


closed #3