Icon Close country selection

Thunder SSLi

The most comprehensive decryption solution, A10 Thunder® SSLi® (SSL Insight) decrypts traffic across all ports, enabling third-party security devices to analyze all enterprise traffic without compromising performance. 

Thunder SSLi eliminates the blind spot introduced by SSL encryption by offloading CPU-intensive SSL decryption and encryption functions from third-party security devices while ensuring compliance with privacy standards. While dedicated security devices provide in-depth inspection and analysis of network traffic, they are not designed to decrypt and encrypt traffic at high speeds. In fact, many security products do not have the ability to decrypt traffic at all. 

Thunder SSLi boosts the performance of the security infrastructure by decrypting traffic and forwarding it to one or more third-party security devices, such as a firewall for deep packet inspection (DPI). Thunder SSLi re-encrypts traffic and forwards it to the intended destination. Response traffic is also inspected in the same way.

Multiple Deployment & Decryption Options
Thunder SSLi may be deployed inline, on the enterprise perimeter, and can decrypt traffic for a variety of security products simultaneously, including inline, non-inline (passive/TAP) and ICAP-enabled devices

Features

Decrypt Across Multiple Ports and Protocols

Using Dynamic Port Inspection, Thunder SSLi decrypts traffic across all TCP ports. Decryption for protocols like STARTTLS, XMPP, SMTP and POP3 are also supported. However, the decryption functionalities are not limited to only SSL/TLS, encrypted traffic and decryption for SSH traffic is supported as well.

 

Full-Proxy Architecture

Thunder SSLi operates as a full-proxy, which enables adjusting of cipher suite selection for encryption. Thunder SSLi can re-negotiate to a different cipher suite of similar strength, making the solution future-proof against new ciphers or TLS versions that might be introduced to the network without notice. Thunder SSLi can ensure traffic is encrypted using the most secure ciphers, eliminating the use of compromised ciphers.

 

Multiple Ciphers  for PFS Support

With dedicated SSL acceleration hardware, Thunder SSLi delivers high performance with 2048-bit and 4096-bit key sizes, while supporting multiple cipher suites, including DHE and ECDHE, for perfect forward secrecy (PFS) support. 

 

URL Classification for Selective Decryption

Thunder SSLi URL classification categorizes the traffic of more than 460 million domains, selectively bypassing traffic decryption to enforce privacy policies so private/sensitive data (e.g., medical or financial records) is not decrypted, in adherence to compliance standards like HIPAA.

 

URL Filtering for Access Control

URL filtering is used to maximize employee productivity and reduce risks by blocking access to malicious websites, including malware, spam and phishing sources.

 

Load Balance Security Devices

With load-balancing support, Thunder SSLi dramatically increases performance of firewalls and other security devices. Easily add security capacity and extend the life of existing security devices. Flexible weighted traffic priorities can be assigned.

 

Benefits

  • Gain Full Visibility Into The Blind Spot
  • Secure Key Storage
  • Decrypt Traffic for All Security Devices 
  • Validate Certificate Status
  • Ensure Compliance and Privacy
  • Reduce Operational Costs
  • Simplify Operations and Management

IT solutions

bg

Test a product

On local martkets Bakotech Group operates through a well-established partner network, including over 1,000 active dealers. Key IT-integrators and are involved in the realization of large-scale projects concerning implementing solutions for end-customers from various segments of business. Bakotech's business strategy is True Value Added Distribution or in other words - project oriented distribution.

We are providing our partners with a wide range of services such as PR, co-marketing activities, pre post-sales support, trainings for partners and end-customers, PoC, PoV, solution consulting, implementation support and technical support.

Contact Us

Bakotech Sp. z o.o.

ul. Drukarska 18/5

30-348 Kraków

Poland

Dane firmy

VAT ID 6762466740

REGON 122894922

KRS 0000467615

Kontakt

ph. +48 12 340 90 30

office-cee@bakotech.com

Privacy policy

Subscribe to stay updated

Would you like to stay updated on the current IT and InfoSec news? About BAKOTECH events like webinars, trainings and conferences? Please, leave your e-mail:
Error occured. Please check the form fields and try again.
This address is already in our database.
The subscription has been added. Thank you!
© Bakotech - 2022. All rights reserved

The website uses cookies to deliver services in accordance with the Cookies Policy. You can define the conditions for storing or accessing the cookie mechanism in your browser.

I accept