There have been a couple of security vendor press releases recently talking about how they solve the issue of anonymous web proxies. These proxies are web servers that allow users to circumvent URL / content filtering systems to access sites that may be prohibited at work. There are a ton of proxies for MySpace, for example. The first release I saw was from 8e6 Technologies. Typical vendor marketing in action here talking about the dangers of proxies and how they solve the problem. There was a similar release from Aladdin Knowledge Systems. However this release bordered on sensationalism in my book. They claim to be able to stop 100% of anonymous proxies, even encrypted connections.
I don’t know how that is possible. Granted they are not trying to keep track of Proxy URL’s, but still. Even encrypted? How would their software know the difference between me logging into my bank with SSL and logging into a proxy with SSL. I am certainly no expert when it comes to proxies but I do know a bit about them.
Is it realistic to think that any security technology can block 100% of a security threat?