Fremont, California, November 9, 2026 / PRNewswire / Sil A provider of network visualization and traffic visualization solutions for Valley-based tokens, Niagara Networks, announced today that it has added TLS 1.3 decryption capabilities to its ePacketron platform, expanding the visibility of encrypted traffic to support ECH ( Encrypted Client Hello )-aware selective checking, post-quantum cryptography ( PQC ) support, as well as high-performance TLS processing.

The company stated that the TLS decryption throughput of this enhanced solution exceeds 90 Gbps, supporting up to 110,000 new decrypted TLS sessions per second, and can be scaled to handle 1 million concurrent decrypted sessions. These figures come from the performance tests of Niagara Networks.

With the accelerated adoption of TLS 1.3 and the continuous evolution of encryption standards, traditional network visualization architectures are facing increasing challenges in maintaining access to security-related traffic. ECH is defined by RFC 9849 and can protect sensitive TLS handshake information, including the actual target hostnames, thereby undermining the effectiveness of traditional passive monitoring and hostname-based security strategies.

At the same time, the transition to post-quantum cryptography has introduced new key exchange mechanisms, and security infrastructure must support these mechanisms in order to maintain effective checks. Niagara Networks addresses these challenges by extending advanced TLS interception, intelligent strategy execution, and quantum-resistant key exchange support to its ePacketron Network Intelligence platform.

Rather than blocking ECH or downgrading connections to non-ECH TLS, the design of ePacketron is to maintain ECH awareness and negotiation on the supported enterprise management clients, while also implementing authorized, policy-based checks.

The enhanced version ePacketron TLS decryption engine has introduced a number of capabilities designed to maintain secure visibility as encrypted communications evolve:

• ECH Sensing TLS 1.3 Decryption: On the premise that enterprise certificate trust and client compatibility are met, selectively intercept connections that are protected by ECH, without stripping or downgrading ECH.
• By default, post-quantum cryptography is supported: It allows the use of X25519MLKEM768 as the preferred configuration for hybrid TLS 1.3 key exchange, combining traditional X25519 with ML-KEM-768. When negotiating with compatible peers, ML-KEM-1024 is also supported.
• High-performance TLS decryption: Provides a decryption throughput of over 90 Gbps, and mirrors the decrypted traffic to downstream security tools.
• Million session expansion capability: Supports up to 110,000 new decrypted TLS sessions per second, as well as 1 million concurrent decrypted TLS sessions.
• Policy-based selective inspection: Organizations are allowed to apply configurable TLS processing policies based on supported target intelligence and security requirements, including decryption, logging, blocking, or encryption bypass.
• Optimized security tool delivery: Integrated with the packet, broker architecture of Niagara Networks, it delivers the selected decrypted traffic to the existing NDR, IDS, IPS, SOC, and NOC monitoring platforms.

These new capabilities are built upon the ePacketron acceleration architecture of Niagara Networks. This architecture, through a dedicated Network Intelligence layer, provides a high-level packet processing capacity of up to 600 Gbps L4 – L7.

By decrypting computationally intensive TLS, filtering traffic, converting data packets, and offloading these processes from downstream security tools, ePacketron helps organizations improve inspection efficiency while also extending the value of their existing security infrastructure.

This architecture combines encrypted traffic intelligence with high-performance packet processing, enabling security teams to prioritize traffic that requires more in-depth analysis, while allowing encrypted communications that do not need to be checked to pass through unaffected.

"The evolution of encryption technology has surpassed that of traditional network visualization architectures. By supporting ECH-enabled TLS inspections, post-quantum key exchange, and high-performance decryption, we are transforming ePacketron from traditional packet and brokering to a new generation of Network Intelligence," said Niagara Networks's founder and CEO, Ben Askarinam. "Our goal is to give organizations greater control over encrypted traffic visibility, while also helping their existing security infrastructure to operate more efficiently."

"Supporting modern TLS 1.3 requires not only raw decryption throughput but also compatibility with emerging encryption standards, scalable session handling capabilities, and intelligent traffic processing abilities," said Vitaliy Ivanov, Vice President of Software Engineering at Niagara Networks. "We built ePacketron from scratch, combining ECH awareness and interception, post-quantum key exchange, and selective policy execution to help security teams maintain operational visibility throughout the TLS evolution process."

Niagara Networks will showcase its enhanced ePacketron TLS decryption solution at Cisco Live Melbourne from November 9th to 12th, 2026. Booth number: B14.

The enhanced version TLS with decryption capability 1.3 has been released on the ePacketron platform along with version FabricFlow 12.14. Product availability, supported deployment configurations, and licensing details will be provided by Niagara Networks.

Niagara Networks is a company headquartered in Silicon Valley that provides high-performance, reliable network visualization and traffic delivery solutions for mission-critical environments. Its solutions offer actionable intelligence across physical, virtual, and cloud networks for security operation centers and network operation centers (SOC / NOC). Niagara Networks provides the foundational components for advanced visualization architectures, including network packet broker, bypass switch, network TAP, Network Intelligence acceleration, as well as centralized management software. For more information, please visit www.niagaranetworks.com.