2016 Symantec Corporation This document may be freely reproduced & distributed whole & intact including this copyright
notice.
9
2. SV3800, SV3800B, and SV3800B-20
2.1 Overview
The SSL Visibility Appliance products provide two main functions when
deployed within a network:
•
They enable other security appliances to see a non encrypted version of
SSL/TLS traffic that is crossing the network. This is called SSL Inspection.
•
They can act as a policy control point enabling explicit control over what
SSL/TLS traffic is and is not allowed across the network.
The SSL Visibility Appliance is designed to work alongside existing security
devices such as Intrusion Prevention Systems (IPS), Intrusion Detection Systems
(IDS), Data Loss Prevention systems (DLP), Network Forensic appliance and
others. It provides a non-encrypted version of SSL/TLS traffic to the associated
appliances while maintaining an end-to-end SSL/TLS connection between the
client and server involved in the session.
There are three basic connectivity modes that define how the
SV3800/SV3800B/SV3800B-20 and the associated security appliance are
connected to each other and to the network. These modes are identified as:
•
Active-Inline
•
Passive-Inline
•
Passive-Tap
The Active/Passive designation refers to the associated security appliance and
how it behaves while the Inline/Tap designation refers to how the
SV3800/SV3800B/SV3800B-20 is connected to the network. An “Active”
associated appliance processes traffic from the SV3800 and then returns the traffic
to the SV3800/SV3800B/SV3800B-20, while a “Passive” appliance simply
consumes traffic from the SV3800/SV3800B/SV3800B-20.
The SV3800/SV3800B/SV3800B-20 can be either “Inline,” or a TAP, which is
connected to a network span or tap port. The following figures show these three
modes of operation.
