A lack of visibility into encrypted traffic can pave the way for malware, ransomware, and other dangerous cyber threats to slip past security tools undetected. Together, SOOSAN INT and Keysight provide an efficient, proven SSL visibility solution that helps Korea’s largest organizations avoid blind spots, breaches, and loss of brand reputation resulting from data leaks.

With 70% market share across the country, SOOSAN INT’s SSL Visibility Appliances deliver:

• One source for multiple data uses
• High performance with zero impact on the network
• High compatibility with security tools

Adding a Keysight Network Visibility Platform to filter and deliver traffic to the SOOSAN appliances helps the nation’s leading enterprises and government agencies maximize security tool performance, resilience, and scalability across large, high-profile IT environments.

Joint SOOSAN-Keysight solutions are deployed at more than 800 sites across Korea including Fortune 500 companies, power plants, service provider facilities, and government agencies such as:

• The Korean Ministry of Education
• The National Data Center of Korea
• The Defense Data Center
• The National Election Commission
• The Supreme Court of Korea  

SOOSAN INT and Keysight offload decryption efficiently

Combining SOOSAN SSL Visibility Appliances with a Keysight Network Visibility Platform creates fast, reliable SSL decryption and distribution of plain-text traffic for analysis by customers’ monitoring tools. Here’s how it works:

• Vision network packet brokers (NPBs) from Keysight aggregate, filter, and forward large amounts of SSL-encrypted traffic to SOOSAN INT appliances in real time for instantaneous decryption and conversion to plain text

• The appliances decrypt and send traffic back to Keysight for efficient distribution to customers’ performance and security monitoring tools including next-gen and web application firewalls (NGFWs, WAFs), intrusion detection systems (IDS), and data loss prevention (DLP) solutions  

SOOSAN & Keysight Streamline SSL Decryption and Traffic Analysis 

Highlights of the integrated solution include:

• 100% SSL visibility across hybrid network infrastructures
• 80% higher security tool performance 
• 100% network resilience    
• Better, faster threat detection, hunting and prevention

Joint solution enhances scale, tool performance by up to 80%

SOOSAN INT’s SSL Visibility appliances accommodate evolving network ecosystems at capacities ranging from 300MB to 220 GB. Keysight’s Vision ONE, Vision 400, and Vision X network packet brokers (NPBs) provide foundational flexibility and scale to support traffic growth for critical infrastructure (CI) and other hybrid environments. At the end of the day, offloading SSL decryption alleviates the burden on monitoring and analysis tools to improve utilization and performance by as much as 80%.

Bypass adds fault-tolerance

Resilience and visibility go hand in hand allowing traffic to continue flowing in the event that one inline tool in the security chain suffers an outage. A critical part of any network visibility fabric, Keysight’s standalone iBypass switches send heartbeat packets to SOOSAN appliances and inline security tools to perform health-checks and instantly reroute traffic in the event of a tool or power failure.

A de-facto standard for modern networks 

Modern network traffic volumes only seem to scale up, and the overwhelming percentage of traffic that travels encrypted may even increase. SSL visibility solutions combining SOOSAN INT and Keysight technologies create a powerful formula for improving both the security and cost-efficiency of large-scale networks that demand the highest standard of reliability and resilience.  

SOOSAN INT and Keysight provide a single source of truth for multiple monitoring tools and use cases across entire network and cloud environments. Read the full case study.