Juniper shrinking SSL traffic for the WAN

New software decrypts SSL to optimize it

Juniper Networks' WAN acceleration gear will soon support optimizing SSL traffic, making better use of corporate bandwidth by reducing the amount of bits it takes to transmit SSL traffic across wide-area links.

Because it is encrypted, SSL traffic cannot be optimized by Juniper devices until an upcoming software release, so depending on the percentage of traffic that is SSL encrypted, data reduction over the WAN is less significant than it might be otherwise.

Riverbed Technology and Blue Coat Systems already perform this SSL support.

With the software upgrade, Juniper is adding SSL to its AppFlow technology, which provides the acceleration needed for applications that cannot benefit from more generalized TCP acceleration until their own protocol limitations are removed. In the case of SSL, the most significant limitation is that it is encrypted.

Juniper addresses SSL traffic by decrypting it within its WX devices. The WX appliances sit at both ends of corporate WAN links and through a variety of compression and optimization techniques squeeze more data across the connections.

After decrypting the local SSL traffic, a WX shrinks it as much as it can and sends it over the WAN in IPSec tunnels to other WX devices. The WX on the far side will terminate the IPSec tunnel, reassembles the traffic and reencrypt it in an SSL session headed toward the client or server at that end.

Private SSL keys are stored at data center WX appliances only, and session keys are pushed through a IPSec tunnels to the remote WX devices.

The company is also announcing AppFlow for CIFs Server Message Block (SMB) signing that accelerates and preserves SMB signaling that is used to avoid man-in-the-middle attacks.

Juniper also is introducing content distribution features for its WX devices that pushes virus updates, files that teams need to do their work, training videos and the like to branch office WX appliances where users can access them without each one having to connect over the WAN to servers.

The package of software upgrades is available in November.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Tim Greene

Tim Greene

Network World
Show Comments

Essentials

Brother MFC-L3745CDW Colour Laser Multifunction

Learn more >

Mobile

Exec

Sony WH-1000XM4 Wireless Noise Cancelling Headphones

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?