PacketShark Encryption & Decryption Appliance

SSL & TLS Encrypted Traffic Visibility

GAIN 100% VISIBILITY INTO THE INVISIBLE

High-Performance Encrypted Traffic Visibility and Compliance Appliance

TLS & SSL I Filtering & Bypass I Compliance & Privacy

DECRYPTION

Decrypt inbound and outbound SSL/TLS sessions up to 50Gbps to expose hidden threats and validate certificates. Support SSL 3.0 through TLS 1.3 for complete network visibility.

PROXY

Act as a high-performance SSL/TLS decrypt proxy, terminating sessions and forwarding clear traffic to security tools. Enables selective inspection, certificate validation, and policy-based routing without impacting application performance.

POLICY

Use policy-based traffic control to decrypt only what matters. URL classification enables selective bypass to protect privacy, reduce tool load, and safely streamline inspection.

PacketShark 50G Encrypted Traffic Visibility

PacketShark is a high-performance SSL/TLS decryption appliance engineered to deliver deep traffic visibility at up to 50Gbps throughput. Built for security operations requiring full transparency without sacrificing privacy or compliance, it provides inbound and outbound decryption for monitoring tools while supporting SSL 3.0, TLS 1.0, 1.1, 1.2, and 1.3 encryption protocols. Its policy-based traffic control enables selective decryption and inspection, ensuring focused visibility and efficient processing. With built-in URL classification, PacketShark categorizes traffic to help protect user privacy and meet regulatory standards such as HIPAA, PCI DSS, and GDPR.

The appliance includes robust logging and auditing capabilities to support regulatory compliance and maintain forensic-ready records. Its powerful URL filtering proactively blocks access to malicious websites, as well as those associated with malware, spam, or phishing attacks. Seamless integration with security infrastructure—including NGFW, IDS/IPS, DLP, and WAF—ensures decrypted traffic is enriched with full-spectrum analysis. Offering flexible inline or out-of-band deployment, PacketShark fits effortlessly into existing network topologies with minimal disruption. Ideal for enterprises, telecom providers, and compliance-driven environments, PacketShark equips security teams with comprehensive SSL/TLS traffic visibility, while maintaining strict control over decryption policies and data governance.

Advanced session handling capabilities enable precise reassembly of encrypted streams for deeper behavioral analysis. Support for GRE and VXLAN tunneling allows secure forwarding of decrypted traffic to remote analysis tools. Out-of-the-box dashboards and user-configurable rules streamline deployment and ongoing management.

Inbound and Outbound Decryption with TLS/SSL support
Multiple encryption protocols support including SSL 3.0, TLS 1.0, 1.1, 1.2, and TLS 1.3
URL Classification for selective decryption bypass to protect privacy and compliance
URL Filtering to enhance productivity and mitigate risks by blocking access to malicious websites hosting malware, spam, or phishing
Policy-Based Traffic Control determines what types of traffic should be decrypted and inspected, ensuring flexibility in managing different traffic flows.
Inline and Out-of-Band Deployment for real-time decryption of network traffic to mirror or copy traffic for inspection without adding latency.
Integrates seamlessly with NGFWs, IDS/IPS, DLP, and other security tools to share decrypted traffic for inspection.
Full audit trail and logging capabilities to comply with regulatory requirements (e.g., GDPR, HIPAA, PCI DSS).

Inbound and Outbound Decryption
- Ability to decrypt/encrypt both incoming and outgoing TLS/SSL appliance traffic to provide visibility to Security tools such as IDS, NDR, WAF, Forensics etc.
TLS 1.3 Support
- Can handle multiple encryption protocols, such as SSL 3.0, TLS 1.0, 1.1, 1.2, and TLS 1.3
URL Classification
- PacketShark‘s URL classification system categorizes traffic, enabling selective decryption bypass to protect privacy.
  This ensures sensitive data, like medical or financial records, stays encrypted and complies with regulations such as HIPAA.
URL Filtering
- URL filtering enhances employee productivity and mitigates risks by blocking access to malicious websites, such as those hosting
  malware, spam, or phishing attacks.
Policy-Based Traffic Control
- Policies to control what types of traffic should be decrypted and inspected, ensuring flexibility in managing different traffic flows.
Inline and Out-of-Band Deployment
- Enables real-time decryption of network traffic and offers the option to mirror or copy traffic for inspection without adding latency.
Integration with Security Ecosystems
- Integrates seamlessly with NGFWs, IDS/IPS, DLP, and other security tools to share decrypted traffic for inspection.
Logging and Auditing
- Full audit trail and logging capabilities to comply with regulatory requirements (e.g., GDPR, HIPAA, PCI DSS).

SKU	Throughput Total Traffic*	Throughput SSL Traffic*	NMC Slots	Height
NX-PS-DC-1XS	10 Gbit/s	2 Gbit/s	8	2U
NX-PS-DC-1M	15 Gbit/s	7 Gbit/s	8	2U
NX-PS-DC-1L	25 Gbit/s	13 Gbit/s	8	2U
NX-PS-DC-1XL	50 Gbit/s	25 Gbit/s	8	2U

* Minimum

PACKETSHARK MODULES
SKU	Description	Modules
NX-PS-DC-8PC	NMC Module 8 x 10/100/1000Base-T RJ45	View
NX-PS-DC-4P1SL	NMC Module 4 x 1G Singlemode LC	View
NX-PS-DC-4P1ML	NMC Module 4 x 1G Multimode LC	View
NX-PS-DC-4P10SL	NMC Module 4 x 10G Singlemode LC	View
NX-PS-DC-4P10ML	NMC Module 4 x 10G Multimode LC	View
NX-PS-DC-2P40SL	NMC Module 2 x 40G Singlemode LC	View
NX-PS-DC-2P40MM	NMC Module 2 x 40G Multimode MTP®/MPO	View
NX-PS-DC-2P100SL	NMC Module 2 x 100G Singlemode LC	View
NX-PS-DC-2P100MM	NMC Module 2 x 100G Multimode MTP®/MPO	View

FEATURED RESOURCES

Network Visibility for Our Customers

Deployment

SERVICE & SUPPORT

Unparalleled Multi-Level Service & Support for Peace of Mind

NEOXPacketShark Appliances come with NEOX SILVER Support and can be upgraded to GOLD Support for advanced replacement in case of a hardware failure.