NIAGARA NETWORKS INTRODUCES ECH-AWARE TLS 1.3 DECRYPTION WITH POST-QUANTUM CRYPTOGRAPHY & 90+ Gbps PERFORMANCE

New ePacketron capabilities combine selective encrypted traffic inspection, post-quantum key exchange & million-session scalability, with live demonstrations at Cisco Live Melbourne 2026, Booth B14

FREMONT, Calif., Nov. 9, 2026 /PRNewswire/ -- Niagara Networks, a Silicon Valley-based provider of high-performance Network Intelligence and visibility solutions, today announced new TLS 1.3 decryption capabilities for its ePacketron platform, extending encrypted traffic visibility with Encrypted Client Hello (ECH)-aware selective inspection, Post-Quantum Cryptography (PQC) support & high-performance TLS processing.

The enhanced solution delivers over 90 Gbps of TLS decryption throughput, supports up to 110,000 new decrypted TLS sessions per second & scales to 1 million concurrent decrypted sessions, according to Niagara Networks' performance testing.

Addressing the Next Generation of Encrypted Traffic Visibility
As TLS 1.3 adoption accelerates and encryption standards evolve, traditional network visibility architectures face growing challenges in maintaining access to security-relevant traffic. Encrypted Client Hello (ECH), defined in RFC 9849, protects sensitive TLS handshake information, including the actual destination hostname, reducing the effectiveness of conventional passive monitoring and hostname-based security policies.

At the same time, the transition toward post-quantum cryptography introduces new key-exchange mechanisms that security infrastructure must support to maintain effective inspection. Niagara Networks addresses these challenges by extending its ePacketron Network Intelligence platform with advanced TLS interception, intelligent policy enforcement & quantum-resistant key-exchange support.

Rather than relying on ECH blocking or downgrading connections to non-ECH TLS, ePacketron is designed to maintain ECH-aware negotiation for supported enterprise-managed clients while enabling authorized, policy-driven inspection.

ECH-Aware Decryption Meets Post-Quantum TLS
The enhanced ePacketron TLS decryption engine introduces capabilities designed to preserve security visibility as encrypted communications evolve:

• ECH-Aware TLS 1.3 Decryption: Supports selective interception of eligible ECH-protected connections without stripping or downgrading ECH, subject to enterprise certificate trust & client compatibility.
• Post-Quantum Cryptography by Default: Supports hybrid TLS 1.3 key exchange using X25519MLKEM768 as the preferred configuration, combining classical X25519 with ML-KEM-768.  ML-KEM-1024 is also supported when negotiated with compatible peers.
• High-Performance TLS Decryption: Delivers over 90 Gbps decrypted throughput, with decrypted traffic mirrored to downstream security tools.  
• Million-Session Scalability: Supports up to 110,000 new decrypted TLS sessions per second & 1 million concurrent decrypted TLS sessions.
• Policy-Based Selective Inspection: Enables organizations to apply configurable TLS handling policies, including decryption, logging, blocking or encrypted bypass, based on supported destination intelligence & security requirements.
• Optimized Security Tool Delivery: Integrates with Niagara Networks' packet broker architecture to deliver selected decrypted traffic to existing NDR, IDS/IPS, SOC & NOC monitoring platforms.

Extending Network Intelligence Beyond Traditional Packet Brokers

The new capabilities build on Niagara Networks' ePacketron acceleration architecture, which provides up to 600 Gbps of advanced Layer 4–7 packet processing through a dedicated Network Intelligence layer.

By offloading compute-intensive TLS decryption, traffic filtering, packet transformation & optimization from downstream security tools, ePacketron helps organizations improve inspection efficiency while extending the value of their existing security infrastructure.

The architecture combines encrypted traffic intelligence with high-performance packet processing, allowing security teams to prioritize traffic requiring deeper analysis while preserving encrypted communications that do not require inspection.

Decrypt What Matters. Bypass What Is Private.

This approach enables a more selective model for encrypted traffic visibility, balancing security requirements, privacy considerations & operational performance.

"Encryption is evolving faster than traditional network visibility architectures. With ECH-aware TLS inspection, post-quantum key-exchange support & high-performance decryption, we are extending ePacketron beyond conventional packet brokering into a new generation of Network Intelligence," said Ben Askarinam, Founder & CEO of Niagara Networks. "Our objective is to give organizations greater control over encrypted traffic visibility while helping their existing security infrastructure operate more efficiently."

"Supporting modern TLS 1.3 inspection requires more than raw decryption throughput. It requires compatibility with emerging encryption standards, scalable session processing & intelligent traffic handling," said Vitaliy Ivanov, Vice President of Software Engineering at Niagara Networks. " We built ePacketron from the ground up to combine ECH-aware interception, post-quantum key exchange and selective policy enforcement, helping security teams maintain actionable visibility as TLS evolves."

Live Demonstrations at Cisco Live Melbourne 2026

Niagara Networks will showcase its enhanced ePacketron TLS decryption solution at Cisco Live Melbourne, November 9–12, 2026, Booth B14.

Schedule a meeting with Niagara Networks at Cisco Live Melbourne >>

Availability
The enhanced TLS 1.3 decryption capabilities are released for the ePacketron platform with FabricFlow 12.14 ver. Product availability, supported deployment configurations & licensing details will be provided by Niagara Networks.

 
Niagara Networks is a Silicon Valley-based company delivering high-performance, reliable network visibility and traffic delivery solutions for mission-critical environments. Its solutions empower Security and Network Operations Centers (SOC/NOC) with actionable intelligence across physical, virtual & cloud networks. Niagara Networks provides the building blocks for advanced visibility architectures, including network packet brokers, bypass switches, network TAPs, Network Intelligence acceleration & centralized management software. For more information, visit www.niagaranetworks.com.

SOURCE Niagara Networks Inc