partner

SOOSAN INT

SOOSAN INT and Keysight: Scale SSL visibility and real-time monitoring across network environments.

Even with dozens of security devices deployed throughout networks, a lack of visibility into encrypted traffic still contributes to security breaches. Together, SOOSAN INT and Keysight provide an efficient, proven SSL visibility solution that helps to avoid breaches and data leaks. The joint solution equips enterprises and government agencies to maximize security tool performance, resilience, and scalability in some of the world’s largest enterprise and government environments.

read the joint solution brief

Centralize SSL decryption for fast, fault-tolerant visibility.

While some security tools can decrypt SSL traffic on their own, many existing tools lack the capability to inspect threats or data leakage inside encrypted traffic. Even those that can decrypt SSL traffic cannot pass decrypted data on to other tools in the security operations center (SOC). In both cases, Keysight and SOOSAN INT improve performance and scale by overcoming challenges of compute-heavy SSL decryption. SOOSAN INT provides a single source of decryption for multiple monitoring tools and use cases across network environments.

Integration Highlights

  • Complete SSL visibility across an organization’s network infrastructure
  • Improved security tool performance by centralizing SSL decryption on a dedicated device
  • Complete network resilience with fault-tolerant deployment and automatic failover
  • Improved threat detection, hunting, and prevention across all encrypted traffic

Unify data, insights, and actions.

SOOSAN INT’s proprietary deep-packet inspection engine processes and decrypts SSL/TLS traffic at incredible speed, providing a single decryption source that feeds all security tools simultaneously. Combined with Keysight’s intelligent network visibility platform, this creates a unified security fabric that eliminates blind spots and maximizes threat detection across the entire network.

SOOSAN INT SSL visibility appliances.

SOOSAN INT is Korea’s leading network security provider, with over 1,700 deployments across highly regulated industries, large-traffic environments, and security-sensitive organizations. Our proprietary deep-packet inspection engine powers the industry-leading ePrism and eWalker product lines.

ePrism SSL VA — Dedicated SSL visibility.

A dedicated SSL/TLS traffic decryption appliance that provides full visibility into encrypted traffic across all ports, without requiring changes to the existing network configuration.

  • Transparent Proxy: Decrypts traffic while preserving original 5-tuple session information
  • Multi-Tool Traffic Forwarding: Forwards decrypted traffic to multiple inline and mirror security devices simultaneously
  • Dynamic bypass: Automatic handling of certificate-pinning sites and anonymizer program control, made possible by protocol-based decryption
  • High availability: Hardware and software bypass, LLCF-based failover, Asymmetric deployment

eWalker SWG — SSL visibility & web filtering

An integrated Secure Web Gateway that combines SSL traffic decryption with internet access control, enabling organizations to block non-work and malicious websites while maintaining full HTTPS visibility.

  • Korea’s largest URL database with daily real-time updates for granular category-based filtering
  • Rule-based policies: Configurable by user group, target site category, time schedule, and date range
  • Flexible deployment: Transparent inline mode for full SSL decryption or mirror mode for zero-impact monitoring

How it works.

Keysight network packet brokers (NPBs) aggregate and forward large amounts of SSL-encrypted traffic to SOOSAN INT appliances in real time. SOOSAN INT decrypts and converts traffic to plain text instantaneously, then sends the decrypted traffic back to Keysight for efficient distribution to next-gen firewalls, WAFs, IPS, APT, NDR, and other security solutions.

Resilience, Scale, and Enhanced Tool Performance

Centralizing SSL decryption to Keysight and SOOSAN INT alleviates the burden on security and analysis tools and significantly improves their utilization and performance.

  • Keysight NPBs provide foundational flexibility and scale to support traffic growth and new security tool deployments
  • SOOSAN INT SSL Visibility appliances accommodate evolving network ecosystems at capacities ranging up to 20 Gbps
  • Keysight iBypass switches add reliable fault-tolerance, ensuring traffic continues to flow in the event of a link, power, or device failure
  • Heartbeat monitoring: The Keysight visibility fabric sends heartbeat packets to SOOSAN INT and inline security tools to perform health checks and instantly reroute traffic in the event of an outage

Keysight delivers scalable, efficient access to all network traffic.

The Keysight Visibility Platform combined with SOOSAN INT SSL Visibility Appliances delivers comprehensive, cost-effective, and future-ready network security visibility.

  • Improved cost-efficiency: Integrate seamlessly with Keysight NPB appliances for flexible growth and cost-performance
  • High operational efficiency: Load balancing to multiple inline security tools ensures maximum utilization
  • Future-ready scalability: Supports small to large-scale data centers
  • Compliance-ready: Granular, policy-based selective decryption meets the strictest regulatory requirements
  • Ease of use: Vendor-neutral open system that can be deployed without changing existing network configurationsSL decryption to find hidden threats, and integrated solutions for physical and virtual visibility.

What Sets SOOSAN INT Apart

With a dominant market position in Korea and over 1,700 enterprise deployments, SOOSAN INT delivers:

  • One source of decryption for multiple data uses across the security stack
  • High performance with minimal impact on the network
  • High compatibility with third-party security tools via transparent proxy architecture
  • Patented traffic analysis technologies backed by a dedicated R&D culture