Firewall Wizards: Re: SSH question

[Kevin Steves <stevesk () sweden hp com>]

Adam Shostack wrote:
> And SSH can be tunneled via most companies' SSL
> 'proxies.'
Exactly, and that's because most "SSL" proxies know nothing about
the SSL protocol; they just use the HTTP CONNECT extension method
to build an HTTP-based circuit gateway, or use some other circuit
mechanism (e.g., Raptor's older httpd doing transparent relaying
on 443/tcp).

Kevin