End-point assisted gateway decryption without man-in-the-middle

A system comprising:

• a processor;
• a data bus coupled to the processor;
• and
• a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
• responsive to receipt at a security device of a connection request from a client to a server:
• receiving a message from the client to the server;
• extracting from a memory associated with the client a secret for performing decryption of application messages communicated from the server to the client;
• and
• using the secret to decrypt the application messages to perform at least one of monitoring and inspection of the application messages as decrypted in accordance with a security policy, while allowing the client and the server to maintain an end-to-end connection without intermediate termination at the security device.

A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

• responsive to receipt at a security device of a connection request from a client to a server:
• receiving a message from the client to the server;
• extracting from a memory associated with the client a secret for performing decryption of application messages communicated from the server to the client;
• and
• using the secret to decrypt the application messages to perform at least one of monitoring and inspection of the application messages as decrypted in accordance with a security policy, while allowing the client and the server to maintain an end-to-end connection without intermediate termination at the security device.