Juniper shrinking SSL traffic for the WAN

New software decrypts SSL to optimize it

Juniper Networks' WAN acceleration gear will soon support optimizing SSL traffic, making better use of corporate bandwidth by reducing the amount of bits it takes to transmit SSL traffic across wide-area links.

Because it is encrypted, SSL traffic cannot be optimized by Juniper devices until an upcoming software release, so depending on the percentage of traffic that is SSL encrypted, data reduction over the WAN is less significant than it might be otherwise.

Riverbed Technology and Blue Coat Systems already perform this SSL support.

With the software upgrade, Juniper is adding SSL to its AppFlow technology, which provides the acceleration needed for applications that cannot benefit from more generalized TCP acceleration until their own protocol limitations are removed. In the case of SSL, the most significant limitation is that it is encrypted.

Juniper addresses SSL traffic by decrypting it within its WX devices. The WX appliances sit at both ends of corporate WAN links and through a variety of compression and optimization techniques squeeze more data across the connections.

After decrypting the local SSL traffic, a WX shrinks it as much as it can and sends it over the WAN in IPSec tunnels to other WX devices. The WX on the far side will terminate the IPSec tunnel, reassembles the traffic and reencrypt it in an SSL session headed toward the client or server at that end.

Private SSL keys are stored at data center WX appliances only, and session keys are pushed through a IPSec tunnels to the remote WX devices.

The company is also announcing AppFlow for CIFs Server Message Block (SMB) signing that accelerates and preserves SMB signaling that is used to avoid man-in-the-middle attacks.

Juniper also is introducing content distribution features for its WX devices that pushes virus updates, files that teams need to do their work, training videos and the like to branch office WX appliances where users can access them without each one having to connect over the WAN to servers.

The package of software upgrades is available in November.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tim Greene

Network World

Comments

Comments are now closed.

Most Popular Reviews

Follow Us

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest News Articles

Resources

Best Deals on GoodGearGuide

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?