Niagara Networks adds TLS 1.3 decryption to ePacketron

Niagara Networks, a Silicon Valley-based provider of network intelligence and visibility solutions, added TLS 1.3 decryption capabilities to its ePacketron platform. The update extends visibility into encrypted traffic as encryption standards change.

Encrypted Client Hello, defined in RFC 9849, shields TLS handshake details, including the actual destination hostname, which reduces the effectiveness of passive monitoring and hostname-based security policies. Meanwhile, the move toward post-quantum cryptography adds key-exchange mechanisms that security infrastructure must support to keep inspection working.

The enhanced ePacketron TLS decryption engine can selectively intercept eligible ECH-protected connections without stripping or downgrading ECH, subject to enterprise certificate trust and client compatibility. It uses hybrid TLS 1.3 key exchange with X25519MLKEM768 as the preferred configuration, combining classical X25519 with ML-KEM-768, and supports ML-KEM-1024 when compatible peers negotiate it. The capabilities were released for the ePacketron platform with FabricFlow 12.14.

Selected decrypted traffic reaches NDR, IDS/IPS, SOC, and NOC monitoring platforms through the packet broker architecture, and policies can direct traffic to decryption, logging, blocking, or encrypted bypass. According to Niagara Networks' performance testing, the platform delivers over 90 Gbps of decryption throughput, supports up to 110,000 new decrypted TLS sessions per second, and scales to 1 million concurrent decrypted sessions.

“Encryption is evolving faster than traditional network visibility architectures. With ECH-aware TLS inspection, post-quantum key-exchange support & high-performance decryption, we are extending ePacketron beyond conventional packet brokering into a new generation of Network Intelligence,” said Ben Askarinam, Founder & CEO of Niagara Networks. “Our objective is to give organizations greater control over encrypted traffic visibility while helping their existing security infrastructure operate more efficiently.”

“Supporting modern TLS 1.3 inspection requires more than raw decryption throughput. It requires compatibility with emerging encryption standards, scalable session processing & intelligent traffic handling,” said Vitaliy Ivanov, Vice President of Software Engineering at Niagara Networks. The company plans to demonstrate the enhanced solution at Cisco Live Melbourne, November 9–12, 2026, at Booth B14, and will provide product availability, deployment configurations, and licensing details.