The table below shows the types of inbound and outbound SSL decryption support on different NS-series Sensor models:
Sensor Model | Inbound SSL decryption | Outbound SSL decryption | ||
|---|---|---|---|---|
Known-key SSL decryption | Agent based SSL decryption | Proxy SSL decryption | Proxy SSL decryption | |
NS3100 | NA | NA | NA | NA |
NS3200 | NA | NA | NA | NA |
NS3500 | NA | NA | NA | NA |
NS3600 | Yes | Yes | Yes | Yes |
NS5100 | Yes | Yes | NA | NA |
NS5200 | Yes | Yes | NA | NA |
NS7100 | Yes | Yes | NA | NA |
NS7200 | Yes | Yes | NA | Yes |
NS7300 | Yes | Yes | NA | Yes |
NS7150 | Yes | Yes | NA | NA |
NS7250 | Yes | Yes | NA | NA |
NS7350 | Yes | Yes | NA | NA |
NS7500 | Yes | Yes | Yes | Yes |
NS7600 | Yes | Yes | Yes | Yes |
NS9100 | Yes | Yes | NA | Yes |
NS9200 | Yes | Yes | NA | Yes |
NS9300 | Yes | Yes | NA | NA |
NS9500 Standalone | Yes | Yes | Yes | Yes |
NS9500 Stack | Yes | Yes | NA | NA |
NS9600 Standalone | Yes | Yes | Yes | Yes |
NS9600 Stack | Yes | Yes | Yes | Yes |
The table below distinguishes between the inbound and outbound SSL decryption support on Virtual IPS Sensors by platform:
Sensor Model | Inbound SSL decryption | Outbound SSL decryption | ||
|---|---|---|---|---|
Known-key SSL decryption | Agent based SSL decryption | Proxy SSL decryption | Proxy SSL decryption | |
IPS-VM600 (ESX and KVM) | Yes | Yes | NA | NA |
IPS-VM5000 (ESX and KVM) | Yes | Yes | NA | NA |
IPS-VM600-SSL (ESX and KVM) | Yes | Yes | Yes | Yes |
IPS-VM600-VSS-SSL (AWS, Azure and GCP) | Yes | Yes | Yes | Yes |
IPS-VM5000-SSL (ESX and KVM) | Yes | Yes | Yes | Yes |