The F5 Herculon SSL Orchestrator is a super high-performance security device that simplifies decryption and encryption of outbound SSL/TLS traffic. Visibility into outbound encrypted traffic is the key to securing data, applications, and networks within your organization.
The SSL Orchestrator is able to dynamically steer unencrypted traffic using policy based management to multiple security tools. Performing outbound decryption & encryption at the Herculon allows organizations to purchase smaller security devices, and extend their life by performing cpu expensive SSL termination at a device made for it.
Managing SSL termination in one device saves your org money while making it simpler to manage SSL in your security stack with one device. It also eliminates the need to manage very sensitive keys in multiple locations.
The SSL Orchestrator can perform encryption and decryption for multiple next generation security tools like:
- Web Application Firewalls WAFs
- Data Loss Prevention DLPs
- Intrusion Prevention Systems IPS
- Intrusion Detection Systems
- Malware Analysis Tools & More
The following table contains key features for the Herculon SSL Orchestrator.
|SSL visibility||Deployment modes|
|High performance SSL decryption/re-encryption||Inline routed layer 3|
|Forward proxy architecture||Inline layer 2|
|SSL/TLS decryption independent of TCP port||ICAP service to DLP and antivirus/antimalware devices|
|Dynamic service chaining||Receive-only|
|Policy-based steering of decrypted traffic||Support for one and two-box deployments|
|Decoupled from physical interface, port, or VLANs||High availability with TCP session resiliency|
|Simplified security service insertion||Load balancing of multiple security devices|
|Service resiliency||Network HSM|
|Policy context engine||Thales|
|Source and destination IP and Subnet||Gemalto|
|Protocol||F5 IP Intelligence Services|
|IP Geolocation||Network HSM|
|IP reputation (subscription)||F5 BIG-IP® Access Policy Manager® (APM®)|
|URL categorization (subscription)||F5 Secure Web Gateway Services|
|Policy-based Block, Bypass, Forward for
|Robust cipher and protocol support|
|TLS 1/1.1/1.2, DTLS1|
|RSA/DHE/ECDHE with Forward Secrecy support|
|SHA, SHA2, AES, AES-GCM|
|Proxy-level control over ciphers and protocols|
Hardware Datasheet Specifications for Herculon SSL Orchestrator i10800 and i5800.
This is the most recent Hardware Datasheet specifications for the F5 Herculon SSL Orchestrator i10800 and i5800. If you are looking for prices or part numbers, please Contact us for sizing and a quote.
Where are the SSL/TLS TPS (Transaction Per Second) numbers for the Herculon SSL Orchestrator? They are not on F5s official datasheet yet, subsequently the answer is – we don’t know for sure. One would think these devices are optimized for decryption & encryption, giving them better numbers than the comparable BIG-IP® iSeries® – but we just don’t have confirmation yet. As soon as we do we will update these datasheets.
These are summarized datasheets for ease of viewing – for the complete full marketing datasheet visit F5s’ official Herculon SSL Orchestrator Hardware Datasheet
Below you will find details on memory, hard drive size, processors, throughput, power stats and more around the Herculon SSL Orechestrator. Contact WorldTech IT for discounts, special pricing & a Free Environment Review
F5 Herculon SSL Orchestrator i10800
F5 Herculon SSL Orchestrator i5800