Visibility into Encrypted Traffic Is Key to Securing Your Data

Rising amounts of encrypted traffic are hampering the ability of IT security teams to protect customer data and intellectual property. Traditional security gateways, network firewalls, and intrusion prevention systems are increasingly running blind to SSL/TLS traffic. The growth in SSL encryption presents a challenge for enterprises, because without security tools to inspect SSL traffic, encrypted attacks go undetected and expose your data to breaches.

F5® Herculon™ SSL Orchestrator™ is an all-in-one appliance designed to optimize the SSL infrastructure, provide security solutions with visibility into SSL/TLS encrypted traffic, and maximize the use of your existing security investment. Herculon SSL Orchestrator supports policy-based management and steering of traffic flows to existing security solutions, and applies context-based intelligence to the handling of encrypted traffic. It is designed to easily integrate into existing architectures and centralize the SSL decrypt/encrypt function by delivering the latest SSL encryption technologies across the entire security infrastructure. With Herculon SSL Orchestrator's high-performance encryption and decryption capabilities, your organization can discover hidden threats and prevent attacks at multiple stages.

Key benefits

Gain visibility into SSL traffic with centralized decryption for inspection across multiple security tools. Re-encrypt user traffic bound to the Internet and web-based applications, enabling security inspection.

Use a single platform for unified inspection of next-generation encryption protocols. This allows for the greatest flexibility in minimizing architectural changes to prevent new blind spots from emerging.

Scale security services with high availability using best-in-class load balancing, health monitoring, and SSL offload capabilities.

Dynamically chain services to efficiently deploy security tools with context-based policies that reduce administrative costs and utilize security resources more effectively.

Integrate flexible deployment options into even the most complex architectures. Centralize the SSL decrypt/encrypt function and deliver the latest encryption technologies across the entire security infrastructure.

Centralized SSL Decryption Across Multiple Security Tools

SSL Orchestrator provides decryption and re-encryption of user traffic bound to the Internet and web-based applications, enabling security inspection. The solution supports policy-based management and steering of traffic flows to third-party security devices such as firewalls, intrusion prevention systems (IPSs), anti-malware, data loss prevention (DLP), and forensics tools. Centralizing the SSL decrypt/encrypt function allows you to realize the full value of your security investments. This multi-vendor ecosystem approach enables the inspection of all your traffic for malware and exfiltration.

Inspect Next-Generation Encryption Protocols

Next-generation encryption protocols are evolving with industry best practices for better security and privacy. New emerging standards like TLS 1.3 and Apple Transport Security (ATS) encourage the rapid adoption of SSL forward secrecy for improved network security. The transition to next-generation encryption breaks passive SSL devices, which bypass your security controls, leaving you at risk. Diverse cipher support allows for the greatest flexibility in preventing new blind spots-without the need for architectural changes.

• General Information
• • Manufacturer
  • F5 Networks
  • Manufacturer Website Address
  • http://www.f5.com
  • Brand Name
  • F5 Networks
  • Product Line
  • Herculon
  • Product Type
  • Network Security/Firewall Appliance