SSL Reduces Next-Generation Firewall Performance
Turning on SSL inspection often greatly reduces the performance of some next-generation firewalls, Pirc said. Application control cannot be done when Facebook, Twitter and webmail is forcing SSL, requiring some companies to turn on the traffic inspection. Pirc said he would question vendors on where they are going in terms of SSL. The amount of malware that uses SSL to communicate out to remote servers has increased significantly, warranting better protection, he said.