Nubeva TLS Decrypt is the industries only out-of-band solution for performing decryption at scale that supports TLS 1.3 and all legacy protocols. Nubeva's Symmetric Key Intercept Architecture allows you to decrypt and, therefore, inspect every packet coming in and out of critical workloads or from storage without bottlenecks. With 70% of network traffic being encrypted, Nubeva delivers the ability to restore visibility and enables end-to-end security.
Industry Challenge
With the introduction of the new encryption standard, TLS 1.3, Elliptic-curve Diffie–Hellman (ECDH), Perfect Forward Secrecy (PFS) and pinned certificates; combined with modern, distributed nature our cloud application architectures, traditional decryption methods are failing. With the introduction of ephemeral keys, out-of-band monitoring no longer works. Decryption with man-in-the-middle intercepts is not practical to place everywhere. In today’s TLS 1.3 world, organizations are being forced to choose between embracing aggressive encryption for increased security or reduce encryption practices to enable monitoring, which is increasingly difficult with third party services. Until now...
How Nubeva's Symmetric Key Intercept Works?
Nubeva’s TLS Decrypt introduced a new way to decrypt new modern encryption protocols called Symmetric Key Intercept.Our architecture runs in parallel as an overlay solution to your network monitoring practices. Here is how Nubeva TLS Decrypt works:
Discover and extracts the final symmetric keys from certificate after the handshake to rederive the symmetric key.
Final, Private keys are securely stored in your, customer-owned database to await the call for decryption
Decryption occurs on tools of choice for full time monitoring, on-demand monitoring or point decryption on key servers pending.
Data and keys never leave your environment and the secure database is hosted in your subscription with your IAM rules. Data is never transmitted over the network in clear text form.
Universal solution that works with any packet source or from storage, with any tool, any use case for any cloud including AWS, Azure and Google for public, private and hybrid deployments.
Nubeva is offered at <1/5th the cost of traditional decryption solutions and it is easy to get started and use, thereby unlocking modern decrypted visibility for everyone, anywhere.
