{"id":1635,"date":"2020-07-29T06:00:16","date_gmt":"2020-07-29T06:00:16","guid":{"rendered":"https:\/\/partnernews.sophos.com\/en-us\/?p=1635"},"modified":"2020-08-05T12:53:43","modified_gmt":"2020-08-05T12:53:43","slug":"making-the-most-of-xg-firewall-v18-part-2","status":"publish","type":"post","link":"https:\/\/partnernews.sophos.com\/en-us\/2020\/07\/products\/making-the-most-of-xg-firewall-v18-part-2\/","title":{"rendered":"Making the Most of XG Firewall v18 \u2013 Part 2"},"content":{"rendered":"

Network traffic encryption levels continue to steadily increase.\u00a0 In the last year, the percentage of pages loaded over HTTPS as reported by Google has increased from 82% to 87% on the Windows platform. It\u2019s even higher on Macs at 93%. At this rate, we are not far away from a 100% TLS encrypted Internet.<\/p>\n

In this second in a series of articles on making the most of the great new features in XG Firewall v18, we\u2019re going to specifically focus on resources available to you in order to help you and your customers make the most of the new Xstream TLS 1.3 inspection solution in XG Firewall v18.<\/p>\n


\n<\/strong>Xstream TLS Inspection<\/h2>\n

In our last article, we covered the Xstream Architecture and the new Xstream DPI engine<\/a> in XG Firewall v18.\u00a0 The new TLS Inspection solution is a key component of the new architecture and provides decryption for TLS\/SSL encrypted traffic with native support for the latest TLS 1.3 standard.<\/p>\n

\"\"<\/p>\n

With most traffic flows transiting the firewall now encrypted, TLS inspection is absolutely critical to opening up this enormous blind spot to enable the firewall to do its job and inspect content coming into the network. As we will discuss in our next article in this series, the DPI engine can be extremely effective at identifying new zero-day variants of Ransomware and other threats, but only if it\u2019s able to inspect the traffic – unencrypted.<\/p>\n


\n<\/strong>How it Works<\/h2>\n

Encrypted traffic flows destined to be examined by the new DPI engine are passed to the TLS inspection engine for decrypt before being inspected. After inspection, the flow is re-encrypted and sent on to its destination. If you\u2019re interested in learning more about how TLS encryption and inspection works, and why it\u2019s important, I suggest reviewing these two great assets on the topic:<\/p>\n