WEBVTT

00:00:01.240 --> 00:00:03.960
Welcome to this Additional Tool Capabilities module.

00:00:04.740 --> 00:00:08.000
We want to briefly touch on topics not covered on this course,

00:00:08.010 --> 00:00:11.060
but which are relevant to you, the cybersecurity professional.

00:00:14.340 --> 00:00:17.530
The first capability of Squid, which we did not touch on and

00:00:17.540 --> 00:00:22.360
which is of relevance, is interception caching. Squid can be used

00:00:22.360 --> 00:00:25.960
to intercept HTTP and HTTPS traffic,

00:00:26.340 --> 00:00:30.400
which makes it very valuable as a cybersecurity tool. For

00:00:30.400 --> 00:00:33.450
more information, check out this link.

00:00:35.040 --> 00:00:38.520
Another capability of Squid not discussed involves the

00:00:38.520 --> 00:00:40.650
multiple off mechanisms that are available.

00:00:42.340 --> 00:00:48.090
Some of these include LDAP and MySQL Database authentication. You can

00:00:48.090 --> 00:00:52.260
even mix and match multiple authentication schemes in your Squid proxy.

00:00:53.440 --> 00:00:56.460
Check out this link for more info here.

00:00:58.940 --> 00:01:02.690
Squid is also very useful when it comes to man‑in‑the‑middle attacks.

00:01:03.140 --> 00:01:06.820
Squid can be used to help understand these attacks better in order to

00:01:06.820 --> 00:01:12.100
better defend against them using a feature known as SSL bumping. Check

00:01:12.100 --> 00:01:18.210
out this link for more info there. On the topic of SSL encryption and

00:01:18.210 --> 00:01:24.720
decryption, related Squid topics include ICAP, or Internet Content

00:01:24.730 --> 00:01:26.160
Adaptation Protocol.

00:01:26.640 --> 00:01:30.510
When intercepting traffic with Squid, traffic can be content

00:01:30.510 --> 00:01:33.060
adapted using an external ICAP server.

00:01:34.440 --> 00:01:39.100
Squid also performs dynamic SSL cert generation as a part of this SSL

00:01:39.100 --> 00:01:44.080
bump feature. Squid is a very useful tool from a cyber security point of

00:01:44.080 --> 00:01:46.350
view when it comes to protecting your network.

00:01:47.340 --> 00:01:48.830
These links are quite large,

00:01:48.970 --> 00:01:51.530
so for easy access you can click on the links in the

00:01:51.530 --> 00:01:53.460
PDF provided along with the course.

00:01:54.340 --> 00:01:54.850
Thank you.