Article by Mohammed Al-Moneer, Regional Director, MENA at A10 Networks.<\/p>\n
The amount of Internet traffic secured via SSL encryption is surging to new heights every day \u2013 it\u2019s estimated that nearly 70% of all web traffic uses SSL encryption and 86% of that uses advanced encryption methods like Elliptical Curve Cryptography (ECC) and Perfect Forward Secrecy (PFS).<\/p>\n
On top of that, when you consider the massive growth in Internet of things (IoT) devices coming onto the network that are beginning to also require fast processing of encrypted traffic, it\u2019s no wonder businesses are concerned about a potential ‘encryption crisis’ that vendors are struggling to address. To this point, research and analyst firm IHS Technology estimates that the number of IoT devices could spike to 30.7 billion in the next three years, and cautions that those devices should leverage secure communication methods such as encryption.<\/p>\n
Despite the potential blind spots introduced by encrypted traffic, which makes it harder to detect malware and other cyberthreats, some companies elect to go without the ability to inspect this encrypted SSL traffic at all. Why? Because there are a host of misperceptions regarding SSL-encrypted traffic. <\/p>\n
Here, we separate fact from fiction and share a few common SSL misperceptions and the reality.<\/p>\n
SSL is complicated, slow, requires many resources to inspect and introduces new risks for networks<\/strong>. Actually, these days, it\u2019s possible for SSL processors to reach speeds as fast as 44,000 SSL connections per second (CPS) for 128B file sizes. And by using application delivery and server load balancing technology, you can offload the compute-intensive SSL\/TLS processing from web servers for faster processing of SSL traffic.<\/p>\n We don\u2019t expect any increases in overall SSL traffic.<\/strong> Some customers claim that as they\u2019re transitioning to using traffic-heavy applications such as Office 365, their SSL traffic nearly doubled. Introducing new business tools requires a better understanding of new demands on your network \u2013 and an even greater need to inspect the traffic that\u2019s coming into your network. And when you consider the need to address the swell of traffic generated by IoT devices that comes in close proximity of your business, you add an even greater need to swiftly and securely process this traffic.<\/p>\n I already know what\u2019s happening with our network traffic.<\/strong> In reality, many IT professionals don\u2019t realise how much encrypted traffic is on their network until they actually install SSL\/TLS encryption solutions \u2013 especially those that support protocols other than HTTPS and can detect SSL\/TLS on non-standard ports. SSL\/TLS encryption in high-throughput, high-connection-rate scenarios can give enterprises assurance with their email platforms that can effectively become a ‘ransomware killer’.<\/p>\n I already have an encryption solution, so don\u2019t need a dedicated appliance.<\/strong> While it\u2019s true that many all-in-one solutions can process encrypted traffic, there is often an SSL performance tax associated. Can you sacrifice security for performance, or vice versa? Having a dedicated appliance for SSL encryption takes the processing demands off your other appliances, meaning you don\u2019t suffer the SSL performance hit.<\/p>\n All we have to do is block access to unsavoury websites and we\u2019re safe<\/strong>: There are numerous examples of legitimate websites being exploited, cross site scripting and malware \u2013 in the form of adware. All of this is prevalent in websites that employees visit during normal daily activity. On top of that, you also have to factor in all the added risks mobile workers bring into secured perimeters \u2013 or simply office employees with mobile devices that include apps with weak security \u2013 that can introduce malware to the corporate network. Bad traffic doesn\u2019t come from unsavoury websites alone. It\u2019s important to have an encryption solution protects your network from all angles. \t<\/p>\n","protected":false},"excerpt":{"rendered":" Article by Mohammed Al-Moneer, Regional Director, MENA at A10 Networks. The amount of Internet traffic secured via SSL encryption is surging to new heights every day \u2013 it\u2019s estimated that nearly 70% of all web traffic uses SSL encryption and 86% of that uses advanced encryption methods like Elliptical Curve Cryptography (ECC) and Perfect Forward […]<\/p>\n","protected":false},"author":23,"featured_media":10650,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,136,399,38],"tags":[1171,394,390,2104,2105],"class_list":["post-13442","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-enterprise-security","category-industry-expert","category-more-news","category-networking","tag-a10-networks","tag-cyberthreat","tag-iot","tag-ssl","tag-ssl-traffic"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/13442","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=13442"}],"version-history":[{"count":0,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/13442\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/10650"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=13442"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=13442"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=13442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}