The website uses cookies to deliver services in accordance with the Cookies Policy. You can define the conditions for storing or accessing the cookie mechanism in your browser.
Close country selection
-
About us
-
Vendors
-
IT solutions
-
Automation & Management
- Professional Services Automation
- BAS | Breach and Attack Simulation
- CEM | Critical Event Management
- RMM | Remote Monitoring and Management & helpdesk
- SIEM | Security Information and Event Management
- SOAR | Security Orchestration, Automation and Response
- UEM/MDM | Unified Endpoint & Mobile Device Management
- Vulnerability management
-
Network & Services Security
- Wi-Fi Security
- CWPP | Cloud Workforce Protection Platform
- Firewall & UTM
- SSL/TLS inspection
- IPS/IDS | Intrusion Prevention & Detection Systems
- MFA | Multi-Factor Authentication
- NDR | Network Detection and Response
- DDoS Protection
- Offensive security
- SASE | Secure Access Service Edge
- SWG | Secure Web Gateway
- WAF | Web Application Firewall
-
E-Mail & Communication
-
Network & Application Monitoring
-
Data Security
-
Endpoint Security
-
Automation & Management
-
For Partner
- Events
-
Services
- News
- Contacts
Thunder SSLi
The most comprehensive decryption solution, A10 Thunder® SSLi® (SSL Insight) decrypts traffic across all ports, enabling third-party security devices to analyze all enterprise traffic without compromising performance.
Thunder SSLi eliminates the blind spot introduced by SSL encryption by offloading CPU-intensive SSL decryption and encryption functions from third-party security devices while ensuring compliance with privacy standards. While dedicated security devices provide in-depth inspection and analysis of network traffic, they are not designed to decrypt and encrypt traffic at high speeds. In fact, many security products do not have the ability to decrypt traffic at all.
Thunder SSLi boosts the performance of the security infrastructure by decrypting traffic and forwarding it to one or more third-party security devices, such as a firewall for deep packet inspection (DPI). Thunder SSLi re-encrypts traffic and forwards it to the intended destination. Response traffic is also inspected in the same way.
Multiple Deployment & Decryption Options
Thunder SSLi may be deployed inline, on the enterprise perimeter, and can decrypt traffic for a variety of security products simultaneously, including inline, non-inline (passive/TAP) and ICAP-enabled devices
Features
Decrypt Across Multiple Ports and Protocols
Using Dynamic Port Inspection, Thunder SSLi decrypts traffic across all TCP ports. Decryption for protocols like STARTTLS, XMPP, SMTP and POP3 are also supported. However, the decryption functionalities are not limited to only SSL/TLS, encrypted traffic and decryption for SSH traffic is supported as well.
Full-Proxy Architecture
Thunder SSLi operates as a full-proxy, which enables adjusting of cipher suite selection for encryption. Thunder SSLi can re-negotiate to a different cipher suite of similar strength, making the solution future-proof against new ciphers or TLS versions that might be introduced to the network without notice. Thunder SSLi can ensure traffic is encrypted using the most secure ciphers, eliminating the use of compromised ciphers.
Multiple Ciphers for PFS Support
With dedicated SSL acceleration hardware, Thunder SSLi delivers high performance with 2048-bit and 4096-bit key sizes, while supporting multiple cipher suites, including DHE and ECDHE, for perfect forward secrecy (PFS) support.
URL Classification for Selective Decryption
Thunder SSLi URL classification categorizes the traffic of more than 460 million domains, selectively bypassing traffic decryption to enforce privacy policies so private/sensitive data (e.g., medical or financial records) is not decrypted, in adherence to compliance standards like HIPAA.
URL Filtering for Access Control
URL filtering is used to maximize employee productivity and reduce risks by blocking access to malicious websites, including malware, spam and phishing sources.
Load Balance Security Devices
With load-balancing support, Thunder SSLi dramatically increases performance of firewalls and other security devices. Easily add security capacity and extend the life of existing security devices. Flexible weighted traffic priorities can be assigned.
Benefits
- Gain Full Visibility Into The Blind Spot
- Secure Key Storage
- Decrypt Traffic for All Security Devices
- Validate Certificate Status
- Ensure Compliance and Privacy
- Reduce Operational Costs
- Simplify Operations and Management
IT solutions
Test a product
On local martkets Bakotech Group operates through a well-established partner network, including over 1,000 active dealers. Key IT-integrators and are involved in the realization of large-scale projects concerning implementing solutions for end-customers from various segments of business. Bakotech's business strategy is True Value Added Distribution or in other words - project oriented distribution.
We are providing our partners with a wide range of services such as PR, co-marketing activities, pre post-sales support, trainings for partners and end-customers, PoC, PoV, solution consulting, implementation support and technical support.
Contact Us
Bakotech Sp. z o.o.
Dane firmy
VAT ID 6762466740
REGON 122894922
KRS 0000467615
Kontakt
ph. +48 12 340 90 30
Related companies
Privacy policy
Subscribe to stay updated
Would you like to stay updated on the current IT and InfoSec news? About BAKOTECH events like webinars, trainings and conferences? Please, leave your e-mail:
© Bakotech - 2022. All rights reserved
