Patent ID: 8543805

Claim:
A method for split proxying Secure Socket Layer (SSL) communications across intermediaries deployed between a client and a server, the method comprising: a) establishing, by a first intermediary device in communication with a server, a first Secure Socket Layer (SSL) session with the server; b) establishing, by a second intermediary device in communication with one or more clients, a second Secure Socket Layer (SSL) session with a client using SSL configuration information received from the first intermediary device, the second intermediary device and the first intermediary device communicating via a third SSL session established between the first intermediary device and the second intermediary device; c) decrypting, by the first intermediary device, encrypted data received, via the first SSL session, from the server using a first session key of the first SSL session; d) transmitting, by the first intermediary device to the second intermediary device via the third SSL session, the data encrypted using a third session key of the third SSL session; e) decrypting, by the second intermediary device, the data encrypted via the third SSL session using the third session key; f) transmitting, by the second intermediary device to the client via the second SSL session, the data encrypted using the second session key of the second SSL session; g) receiving by the second intermediary device from the first intermediary device SSL configuration information identifying a type of SSL proxying to be provided by the first intermediary device and the second intermediary device; and h) establishing by the first intermediary device and the second intermediary device the type of SSL proxying.