GigaVUE Modules for Inline SSL Decryption
Inline SSL decryption is supported on GigaVUE‑HC1, GigaVUE‑HC1-Plus, GigaVUE‑HC2, and GigaVUE‑HC3 nodes, with the GigaSMART and inline bypass modules installed on the same node.
For physical inline bypass, install a fiber bypass (BPS) combo module. On GigaVUE‑HC1 and GigaVUE‑HC2, a copper TAP also supports physical bypass.
Table 1: Inline Bypass Modules lists the inline bypass modules.
|
GigaVUE Node |
Description |
|
GigaVUE‑HC1-Plus |
Bypass Modules (BPS-HC1-D25A60 SX/SR, BPS-HC1-D35C60 LX/LR) |
|
GigaVUE‑HC1 |
Bypass Combo Module 10Gb SX/SR (50/125μm multi-mode) |
|
Copper TAP module |
|
|
GigaVUE‑HC2 |
Bypass Combo Module 10Gb SX/SR (50/125μm multi-mode) |
|
Bypass Combo Module 10Gb SX/SR (62.5/125μm multi-mode) |
|
|
Bypass Combo Module 10Gb LX/LR (single mode) |
|
|
Bypass Combo Module 40Gb SR4 (multi-mode) |
|
|
Copper TAP module |
|
|
GigaVUE‑HC3 |
Bypass Combo Module 100Gb/40Gb SR4 MPO |
2 shows a GigaVUE‑HC2 with the GigaSMART module and the inline bypass (BPS) module. The GigaSMART module contains the SSL decryption software. The inline network ports are on the inline bypass module. The inline and out-of-band tool ports are on the same GigaVUE node.
For inline traffic, the inline network ports and the inline tool ports each need two links, called port pairs, for bidirectional traffic. For out-of-band (offline) traffic, only one link is needed, because the traffic is not bidirectional.
| 2 | GigaVUE Modules: GigaSMART and Inline Bypass |
