SSL/TLS Decryption

SSL/TLS Decryption

SSL encryption is an essential factor in keeping network communications secure. However, while SSL encryption has proven its value, the encrypted data also results in blind spots for security appliances. Organizations must decrypt and analyze SSL traffic to ensure that it is not used as a conduit for hackers to transport and distribute malware.

The X3-Series supports in-line and passive SSL/TLS traffic decryption. The TLS decryption feature reduces blindspots that exist with encrypted traffic. X3-Series network packet brokers support passive decryption of TLS 1.2 and below. TLS 1.3 in-line decryption is done via a proxy. Decrypted traffic can be sent to an out-of-band security or analysis appliance.

After the monitoring data has been decrypted, it can be forwarded to network monitoring tools like IPS, IDS, protocol analyzers, SIEMs tools, etc. This reduces the load on these tools, allowing them to maximize their speed and capacity and the applications they run, such as sandboxes and IPS.