Total Network Inspection in Public Clouds is Possible

The inability to access network packets in and out of critical VMs and containers

Public clouds have made strides by introducing cloud-native solutions to tap and mirror traffic; however, gaps and limitations remain including access to container-to-container traffic inside Kubernetes.

The ubiquitous use of next-gen SSL/TLS encryption

Modern SSL blocks visibility into actual data and therefore, threats. Nearly all traffic is SSL encrypted with TLS 1.3 or TLS1.2 with ECDHE. DevOps cannot reduce protocol levels of all cloud and third party services to reinstate out-of-band solutions rendered useless with new ciphers and protocols.

Inline appliances are not tolerated in cloud environments

The only option left for decryption, is dropping appliances inline, such as firewalls or load balancers, to terminate sessions as a man-in-the middle. This is only practical at the ingress point of an environment, leaving interior, east-west traffic in the dark. DevOps and cloud scale will not tolerate the choke points and appliances everywhere.

Nubeva Traffic Mirroring

Nubeva traffic mirroring fills gaps in the most basic function of network security - packet access. Traditionally, access to packets for inspection has been trivial. But containers, and especially container-to-container traffic in Kubernetes, represents a new challenge. Nubeva sensors run as DaemonSets and mirrors inter- and intra- Kubernetes pod traffic to one or many tools. Filtering and slicing are supported as well. We offer the industry's only high performance, native Kubernetes solution. The simple, drop-in solution creates the visibility you need for full packet inspection and monitoring.

Nubeva TLS Decrypt

Nubeva’s symmetric key discovery re-enables out-of-band decryption. The state of the art Nubeva sensor is deployed on any workload and discovers the session keys from memory. The containerized Nubeva decryptor pairs the final session keys with the mirrored traffic. Historic pcap volumes can also be decrypted. The Nubeva decryptor is software-based and can deploy directly on your security and monitoring tools or run as a stand-alone decryption appliance that forwards traffic to your security tools.

How It Works!

Mirror and Decrypt Your Network Traffic

The Nubeva TLS Decrypt solution paired with Nubeva Traffic Mirroring is the perfect combination for secure decrypted visibility in public clouds, private clouds and in your data center. Here is how it works:

Deployed on workloads of interest, Nubeva Sensors discover final session symmetric keys and securely forward keys to Decryptors. The Nubeva Sensors tap and mirror traffic out to tools where not natively available.
The Nubeva Decryptor can be deployed as a dedicated instance or on the monitoring tools themselves. Decryptors sync mirrored traffic with the session specific symmetric key to decrypt traffic out to tools or packet brokers for distribution, maintaining end-to-end encryption.
SaaS or private management and control.
Feed SEIMs with logs and alerts and orchestrate the system with full REST API.

Unmatched Decryption
Capability

Supports all TLS ciphers including TLS 1.3 and TLS 1.2 with PFS and ECDH; and supports both TLS client and TLS server side connections from VMs and containers.

Non-Disruptive,
Passive Solution

The cloud demands out-of-band solutions. Nubeva requires no app or library changes, no network or architecture restrictions and no inline interruptions.

Unrivaled Packet
Mirroring

The highest performing packet mirroring solution on the market to capture traffic when and where you need it including Kubernetes and container traffic.

Enterprise
Grade

With enterprise grade security, scale from micro to massive to fit the needs of an individual team or the requirements of large enterprises.

Universal
Solution

Our universal solution works with any tap, mirror, packet broker system, with any monitoring tool, in all public and private cloud environments.

Low Total Cost of
Ownership

Nubeva is offered at <1/5th the cost of traditional solutions. It is easy to get started and use, thereby unlocking modern network visibility for everyone, anywhere.