Company's products use a proprietary SSL stack to process SSL, TLS and DTLS service traffic and are NOT exposed to the OpenSSL heartbleed vulnerability
As described on the Common Vulnerabilities and ExposuresWebsite, the TLS and DTLS implementations in OpenSSL 1.0.1, before 1.0.1g, do not properly handle Heartbeat Extension packets which allow remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
Array products – including APV, vAPV, AG, vxAG and EOS products (TMX, SPX) – use the company's proprietary SSL stack to process all SSL, TLS and DTLS service traffic. Therefore, service traffic on Array products is not affected by this OpenSSL Heartbleed vulnerability.
In addition, Array products only have limited usage of OpenSSL for WebUI and SSH management. The versions of OpenSSL used by Array products are not affected by the OpenSSL Heartbleed vulnerability so management traffic on Array products is not affected by the vulnerability either.
Not only is Array's proprietary SSL implementation less vulnerable to exposure, it also delivers additional significant advantages to customers. For businesses requiring 2048-bit or 4096-bit SSL acceleration, Array supports industry-leading scalability and performance on every entry-level, mid-range and high-end appliance. Moreover, every Array appliance delivers the lowest cost $/SSL TPS on the market, bar none, and provides an unmatched set of high-performance SSL and certificate handling features.
S. Vege, Regional Sales Manager ME & SEA, Array Networks
"As a leader in SSL acceleration and SSL VPN, we are happy to report that Array is not affected by this recent OpenSSL vulnerability." said S.Vege, Regional Manager – ME & SEA, Array Networks. "Enterprises and government in the
About Array Networks:
Array Networks is a global leader in application delivery networking with over 5000 worldwide customer deployments. Powered by award-winning SpeedCore™ software, Array solutions are recognized by leading enterprise, service provider and public sector organizations for unmatched performance and total value of ownership. Array is headquartered in
Most Popular Stories
- Americans Still Pessimistic Despite Economic Growth
- Illinois Issues Fracking Rules
- Detroit Muslim Conference Stirs Controversy
- 'Longmire' Cancelled, Looks for New Network
- Startups Offer Smartphone Banking Apps
- Clippers Deal Started With 2 Numbers
- Hip-Hop Takes Up Ferguson Cause
- Echeveste Steps Down, Perez Steps Up at VPE
- Immigration Delay Throws Both Parties a Curve
- Canada, Russia Go to War (on Twitter)