New NCCoE Guide Helps Major Industries Observe Incoming Data While Using Latest Internet Security Protocol

NIST announces a draft practice guide (SP 1800-37) that provides technical approaches for maintaining required enterprise monitoring and auditing in environments using TLS 1.3, which complicates traditional visibility methods. The guide demonstrates secure techniques for temporarily accessing and handling keys and decrypted traffic to enable security monitoring and compliance, details implementation guidance, and invites public comments by April 1, 2024.