things you can't do man in the middle firewall filtering for but obviously there's a need to if you run a business keep an eye on users um there's nothing i know that's really good in the open source world that does this it comes down to commercial software but tracking where your users are going just a general idea and having a log of traffic there probably isn't any great way to do it besides a tool like security onion which is actually our last episode where if you really want to know what everything and everyone on your network is doing full network monitoring with a tool such as security onion to really dive deep into it but you're talking about an absolute beast of a product to be able to do that this is one of the reasons why there's so many commercial solutions in that space uh for tooling that you load on individual computers that you pay monthly subscription fees for uh because it's hard to figure out where all the users are going it's though the way of the web is of two problems one we want to encrypt everything because that's the better security model so people don't sniff the traffic it's really weird to even think you know in one of my favorite demos was around NUMBER_TOKEN-ish i think uh when firesheep was released firesheep was we started encrypting some websites but they would quickly drop back down to non-encrypted and so we encrypted the login for the website a session cookie was then added to your system and then you went back over to a non-encrypted way and the way those session cookies were passed back and forth in clear text allowed a tool called firesheep going i don't need your username and password if i have your session cookies so you could sniff session cookie so we've come way further uh and way better here in NUMBER_TOKEN to pretty much the majority of sites thanks to tools like let's encrypt are encrypted this came though at the expense of lots of internal assisted men's being told by management where'd my users go i need to track my users and now we've been blinded by encryption and we only have like the sni header left because i know esni is a thing but for the most part the sni header is about the only thing left we have to give us some visibility into that so that's my long soap box talk of why it's so hard to track where users go and what traffic they uh did and this is why they're such a and from my business standpoint when i'm not talking on the home lab show we use commercial tooling to be able to monitor track and filter uh people's websites to corral them if you will into things there are tools like pf blocker that at least will deny dns lookups for a lot of these sites and put some blocks in there um untangles a firewall solution that's commercial that i've talked about and demoed on my channel that has a subscription fee but does offer some web filtering and web tracking for where the users are going without having to load an end user agent or break ssl it does have it does cover that in between what that means though is you'll see the sni headers so you know the url they went to but not the
NO_SEGMENT_TOKEN