PacketShark Series

Physical Encryption & Decryption Appliance

Encrypted Network Visibility up to 50G

TLS & SSL I Filtering & Bypass I Compliance & Privacy

FULL VISIBILITY INTO THE INVISIBLE

Network Intelligence to Cover Major Blind Spots

GAIN 100% VISIBILITY INTO THE INVISIBLE

High-Performance Encrypted Traffic Visibility and Compliance Appliance

The NEOXPacketShark Series is a powerful network traffic Encryption and Decryption and Forward Proxy appliance forvisibility into TLS/SSL encrypted traffic up to 50Gbps. PacketShark is a modular solution with add-as-you-grow NMC modules for extensible port density, and provide inline-bypass functionality for high availability. Its Policy-based Traffic Management easily integrates with the existing security frameworks. Dynamic Service-Chaining offers a flexible approach by routing traffic based on the Security Policy Contexts. It uses advanced URL Classification and Filtering to categorize traffic from domains and mitigate risks by blocking access to malicious websites and ensuring Regulatory Compliance with standards. PacketShark integrates with leading security vendors, allowing deployment within a “Secure Decrypt Zone” to safeguard the entire network against encrypted threats. The result is a fully threat-aware Security Operations Center (SOC) with complete Network Visibility.

PacketShark TLS SSL Appliance Visibility Layer

OVERVIEW

PacketShark offers an all-in-one solution to improve SSL infrastructure, providing security devices with visibility into TLS SSL Appliance encrypted traffic and optimizing existing security investments.
It supports policy-based traffic management and easily integrates with current architectures while centralizing SSL decryption and encryption using the latest technologies across the security framework.

Traditionally, addressing security challenges has involved administrators manually linking various products to form a “security stack“. PacketShark integrates with leading security vendors, allowing deployment within a “secure decrypt zone” to safeguard the entire network against encrypted threats.

HIGHLIGHTS

Inbound and Outbound Decryption with TLS/SSL support
Multiple encryption protocols support including SSL 3.0, TLS 1.0, 1.1, 1.2, and TLS 1.3
URL Classification for selective decryption bypass to protect privacy and compliance
URL Filtering to enhance productivity and mitigate risks by blocking access to malicious websites hosting malware, spam, or phishing
Policy-Based Traffic Control determines what types of traffic should be decrypted and inspected, ensuring flexibility in managing different traffic flows.
Inline and Out-of-Band Deployment for real-time decryption of network traffic to mirror or copy traffic for inspection without adding latency.
Integrates seamlessly with NGFWs, IDS/IPS, DLP, and other security tools to share decrypted traffic for inspection.
Full audit trail and logging capabilities to comply with regulatory requirements (e.g., GDPR, HIPAA, PCI DSS).

KEY FEATURES

Inbound and Outbound Decryption
- Ability to decrypt/encrypt both incoming and outgoing TLS SSL Appliance traffic to provide visibility to Security tools such as IDS, NDR, WAF, Forensics etc.
TLS 1.3 Support
- Can handle multiple encryption protocols, such as SSL 3.0, TLS 1.0, 1.1, 1.2, and TLS 1.3
URL Classification
- PacketShark‘s URL classification system categorizes traffic, enabling selective decryption bypass to protect privacy.
  This ensures sensitive data, like medical or financial records, stays encrypted and complies with regulations such as HIPAA.
URL Filtering
- URL filtering enhances employee productivity and mitigates risks by blocking access to malicious websites, such as those hosting
  malware, spam, or phishing attacks.
Policy-Based Traffic Control
- Policies to control what types of traffic should be decrypted and inspected, ensuring flexibility in managing different traffic flows.
Inline and Out-of-Band Deployment
- Enables real-time decryption of network traffic and offers the option to mirror or copy traffic for inspection without adding latency.
Integration with Security Ecosystems
- Integrates seamlessly with NGFWs, IDS/IPS, DLP, and other security tools to share decrypted traffic for inspection.
Logging and Auditing
- Full audit trail and logging capabilities to comply with regulatory requirements (e.g., GDPR, HIPAA, PCI DSS).