What is the meaning of Session Strength in the SSL Visibility Dashboard?

Products

• SSL Visibility Appliance Software

Issue/Introduction

In the SSLV's Dashboard there is a Session Strength pie chart that represents the strength of the ciphers seen on the network, but what does that mean and where can more information be found.

Cause

The pie chart in the SSLV Dashboard lists the cryptographic strength of each cipher suite seen on the network under one of the following values:

Strong - This level of session strength is preferred; attacks are theoretical or not practical

Adequate - Use after evaluating risks. Exploits are possible, but less likely than Weak

Weak - Use if stronger algorithms are not available; known weak algorithms; algorithms with practical attacks; no-pfs algorithms

Insecure - Should not be used; outdated/insecure/experimental algorithms

Resolution

To find out which ciphers are included under a specific value look in the latest Admin Guide under the "Cipher Suites" Appendix.

 

Additional Information

By clicking on a slice within the Session Strength pie chart the SSLV will be automatically redirected to a filtered SSL Session Log page containing flows with the requested strength value.