Inline SSL Decryption Deployments

There are two ways to deploy inline SSL decryption as follows:

■

sessions are inbound

■

sessions are outbound

Refer to Figure 1 for an example of an inbound deployment. The client is on the Internet. The server and the GigaVUE node are located within the same enterprise network, with the GigaVUE node deployed on the server side. The GigaVUE node needs access to the private keys of the server to perform Man-in-the-Middle (MitM) decryption.

Figure 101

Inbound Deployment of Inline SSL Decryption

Use case for inline SSL decryption:

■

Clients on the Internet

■

Servers in internal network

■

Organization has the private key of the server

■

Diffie-Hellman and Perfect Forward Secrecy is being used

Refer to Figure 2 for an example of an outbound deployment. The client and the GigaVUE node are located within the same enterprise network, with the GigaVUE node deployed on the client side. The server is located in another network on the Internet. In this deployment, the role of the GigaVUE node is that of a Man-in-the-Middle (MitM). In this deployment, the GigaVUE node does not have access to the private keys of the server, but as a trusted MitM, the GigaVUE node can look at SSL traffic.

Figure 102

Outbound Deployment of Inline SSL Decryption