Simplifying networking setup complexity for security agents
Methods, systems, and processes to simplify networking setup complexity for security agents implemented in cybersecurity computer environments are disclosed. A request with an intentionally bad Transport Layer Security (TLS) handshake is transmitted from an agent to a server. An indication is received from the server that the request has been rejected. A Round Trip Time (RTT) of the request and rejection of the request is determined. The server is then pinged based on the RTT. The subsequent pinging does not require whitelisting of an additional port and does not negatively interact with network intermediaries that support protocol detection.
1. A computer-implemented method, comprising:
transmitting, from an agent to a server, a request with an intentionally bad Transport Layer Security (TLS) handshake, wherein the server is a destination of the request;
receiving, from the server, an indication that the request has been rejected;
determining the Round Trip Time (RTT) of the request and rejection of the request; and
pinging the server based on the RTT.
2. The computer-implemented method of claim 1 , wherein
the pinging does not require whitelisting of an extra port.
3. The computer-implemented method of claim 1 , wherein
the pinging does not negatively interact with one or more network intermediaries that support protocol detection.
4. A non-transitory computer readable storage medium comprising program instructions executable to:
transmit, from an agent to a server, a request with an intentionally bad Transport Layer Security (TLS) handshake, wherein the server is a destination of the request;
receive, from the server, an indication that the request has been rejected;
determine the Round Trip Time (RTT) of the request and rejection of the request; and
ping the server based on the RTT, wherein
the pinging does not require whitelisting of an extra port, and
the pinging does not negatively interact with one or more network intermediaries that support protocol detection.
5. A system comprising:
one or more processors; and
a memory coupled to the one or more processors, wherein the memory stores program instructions executable by the one or more processors to:
transmit, from an agent to a server, a request with an intentionally bad Transport Layer Security (TLS) handshake, wherein the server is a destination of the request;
receive, from the server, an indication that the request has been rejected;
determine the Round Trip Time (RTT) of the request and rejection of the request; and
ping the server based on the RTT, wherein
the pinging does not require whitelisting of an extra port, and
the pinging does not negatively interact with one or more network intermediaries that support protocol detection.