DPI-SSL Overview

NOTE: DPI-SSL is supported on all appliances.

Deep Packet Inspection of Secure Socket Layer (DPI-SSL) extends SonicWALL’s Deep Packet Inspection technology to allow for the inspection of encrypted HTTPS traffic and other SSL-based traffic. The SSL traffic is decrypted transparently, scanned for threats and then re-encrypted and sent along to its destination if no threats or vulnerabilities are found. DPI-SSL provides additional security, application control, and data leakage prevention for analyzing encrypted HTTPS and other SSL-based traffic. DPI-SSL supports TLS 1.0.

The following security services and features are capable of utilizing DPI-SSL:

DPI-SSL has two main deployment scenarios:

Table 131 shows each platform and the maximum number of concurrent connections on which the appliance can perform Client DPI-SSL inspection.