Monitoring system for a corporate network

A monitoring system for a corporate network comprising:

• a client that exchanges information with a target server to establish an SSL communication channel through which cryptographically protected data is exchanged between the client and the target server using an SSL protocol:
• and
• a monitoring server through which the cryptographically protected data is routed as part of its exchange between the client and the target server;
• wherein the client sends enabling data to the monitoring server that enables the monitoring server to read the cryptographically protected data received at the monitoring server as decoded cryptographically protected data, the monitoring server analyzes the decoded cryptographically protected data to determine if it is suspect data, and at times when the monitoring data determines that the decoded cryptographically protected data is suspect data the monitoring server prevents the transmission of the cryptographically protected data between the client and the target server.

A method for monitoring cryptographically protected data being transmitted between a client and a target server via a monitoring server, the method comprising the steps of:

• exchanging information between the client and the target server to enable the cryptographically protected data to be created and read as decoded cryptographically protected data at both the client and the target server;
• sending to the monitoring server enabling data associated with the information exchanged between the client and the target server, the enabling data enabling the monitoring server to read the cryptographically protected data transmitted through the monitoring server as the decoded cryptographically protected data;
• analyzing the decoded cryptographically protected data at the monitoring server for determining if the decoded cryptographically protected data is suspect data;
• and
• at times when the monitoring server determines that the decoded cryptographically protected data is suspect data storing the suspect data and allowing the transmission of the cryptographically protected data between the client and the target server.