Adding SSL Certificates and Keys for Deduplication

By supporting the use of SSL certificates and keys, Silver Peak provides deduplication for Secure Socket Layer (SSL) encrypted WAN traffic:

n	Silver Peak decrypts SSL data using the configured certificates and keys, optimizes the data, and transmits data over an IPSec tunnel. The peer Silver Peak appliance uses configured SSL certificates to re-encrypt data before transmitting.

n	Peers that exchange and optimize SSL traffic must use the same certificate and key.

n	Use this page to directly load the certificate and key into this appliance.

•	You can add either a PFX certificate (generally, for Microsoft servers) or a PEM certificate.

•	The default is PEM when PFX Certificate File is deselected.

•	If the key file has an encrypted key, enter the passphrase needed to decrypt it.

n	Silver Peak supports X509 Privacy Enhanced Mail (PEM), Personal Information Exchange (PFX), and RSA key 1024-bit and 2048-bit certificate formats.

n	Silver Peak appliances support:

•	Protocol versions: SSLv3, SSLv3.3, TLS1.0, TLS1.1, TLS1.2

•	Cipher algorithms: AES128, AES256, RC4, 3DES

•	Digests: MD5, SHA1

w	Before installing the certificates, you must do the following:

1	Configure the tunnels bilaterally for IPSec mode. To do so, access the Configuration > Tunnels page, select the tunnel, and for Mode, select ipsec.

2	Verify that TCP acceleration and SSL acceleration are enabled. To do so, access the Configuration > Optimization Policy page, and review the Set Actions.

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.