SSTP

Description

This indicates an attempt to use the SSTP (Secure Socket Tunneling Protocol) protocol.
SSTP is a VPN tunnel that encapsulate PPP traffic over the SSL protocol. It allows the use of strong authentication methods like the EAP-TLS. The use of SSL provides key negotiation, encryption and integrity checking.

Affected Products

SSTP

Impact

Network Policy Bypass

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Tunneling

References

• https://technet.microsoft.com/en-us/library/cc731352(v=ws.10).aspx