SD-WAN

 View Only
last person joined: 3 days ago 

Ask questions and share experiences with SD-WAN and Session Smart Router (formerly 128T).
  • 1.  Encryption

     
    Posted 04-26-2022 09:51
    How does encryption work with the SSRs?

    ------------------------------
    Justin Melloni
    Product Marketing Manager
    ------------------------------


  • 2.  RE: Encryption

    Posted 04-27-2022 10:07
    Good day!
    you could refer our youtube channel for Adaptive Encryption. here is the link: https://www.youtube.com/watch?v=MPi1H9DmnlY

    ------------------------------
    Lin Yung Hsiang
    ------------------------------



  • 3.  RE: Encryption

     
    Posted 04-27-2022 12:05
    Awesome, thank you so much @Lin Yung Hsiang! The Adaptive Encryption feature is a really cool SSR feature.

    Two questions now:
    1. How do I enable Adaptive Encryption?
    2. What methodology does the SSR use when it decides it will encrypt? How can I configure this?

    ------------------------------
    Justin Melloni
    Technical Trainer
    ------------------------------



  • 4.  RE: Encryption

    Posted 04-27-2022 18:31
    Hi Justin
    Yes, it is. Compare with other vendor's SD-WAN technical, Juniper SD-WAN or you can call it SSR which can offer best efficiency  or bussiness purpose of control for internet bandwidth usage via adaptive encryption. Plus it's just one of innovations of SSR. 

    Two questions now:
    1. How do I enable Adaptive Encryption?
    A: it's enabled default, you can configure it via security policy profile under Authority 
    2. What methodology does the SSR use when it decides it will encrypt? How can I configure this?
    A: With Adaptive Encryption enabled, the SSR will look at the packets that it is sending to another SSR and see if it is already encrypted or not. If it is encrypted, the SSR will decide not to encrypt it again.
    For encryption, the SSR will use the following ciphers (It also show in the security policy profile):
    • aes-cbc-128
    • aes-cbc-256
    The encryption will be performed on every packet that the SSR Router sends.

    BTW, if you're interesting in Juniper SSR solution, I recommend the Juniper learning portal( https://learningportal.juniper.net/juniper/default.aspx ) which can get introduction to SSR. Search course name "Introduction to Session Smart Routers (ISSR)", and it's free material.

    BR
    Terry

    ------------------------------
    Lin Yung Hsiang
    ------------------------------