June 01, 2003
Ingrian Networks, Inc.Product:
from $19,995 (platform); from $4,995 (service engine)
- Ease of Use:
- Value for Money:
- Overall Rating:
Web site performance is enhanced greatly, not only for SSL transactions but, if desired, for all HTTP traffic because of the caching.
Focused on securing web server transactions and associated e-commerce demands - not a general-purpose security appliance.
A high-performance SSL accelerator that combines authentication, authorization, compression and secure storage. and integrates with any IDS.
Ingrian offers a range of appliances that are designed to secure any application that uses secure socket layer (SSL) transactions, while at the same time speeding up the performance. The company has recently added other features, including authentication, authorization, GZIP compression and an interface to external intrusion detection systems.
The growing demand for secure connections to web servers for e-commerce applications has led to a huge growth in SSL traffic. Because SSL uses public-key cryptography, negotiating an SSL connection requires a lot of resources to perform the exchange of session keys - a process called SSL handshake. This can place a heavy load on web servers and lead to large web server farms being necessary. The Ingrian i215 is designed to solve this problem by taking care of SSL negotiation itself, offloading that task from the web server. The i215 can perform 1,600 SSL handshakes per second, while keeping track of up to 32,000 concurrent SSL connections and their associated session keys.
It is not just secure HTTP traffic that benefits; the i215 can accelerate any protocol over SSL - including IMAP and POP mail protocols.
Another feature is caching of all secure static content, such as banners, buttons and navigation frames. This relieves the backend web server of the task of delivering this static content every time it is requested. The i215 can dramatically reduce the number of real backend web servers required.
There is much more to the i215 than just SSL acceleration. Every secure web site must have a site certificate to allow authenticated SSL connections to the outside world. The i215 can also act as a certificate authority (CA) for this public key infrastructure (PKI) application.
Certain types of intrusion attacks could be hidden in what are effectively SSL VPN tunnels. To combat this, the i215 has a specific option to mirror all SSL encrypted traffic in unencrypted form to a dedicated port, which can be connected to any network-based IDS.
The i215 has the ability to encrypt data for storage. For example, credit card numbers, which often form part of SSL traffic, can be encrypted by the i215 for storage in external databases - keeping such data safe against insider attacks from those who may have access to your storage systems or backup media.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Interim CISO (Chief Information Security Officer) - Cyber Security Director
CYBER EXECS - London (Central), London (Greater)
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- Russian intelligence claims to bust up pending banking cyber-attack
- Presidential commission calls for collaborative action to combat cyber-threats
- Russia's banks will be hacked today, apparently
- Met Police grab suspect with phone unlocked to get hold of data
- Researchers hack Visa cards in six seconds