Mira vETO is a virtual decryption appliance designed to decrypt TLS traffic for enterprise security tools. The appliance supports decryption of all TLS traffic including TLS 1.3, operating as a transparent "bump in the wire" or "bump in the tunnel" deployment. The vETO can decrypt traffic within VXLAN and GRE tunnels without requiring tunnel termination. It includes two network interfaces and two appliance interface ports that operate in either inline or passive mode. The appliance supports up to four mirror interface ports for passive sensors, allowing up to 6 passive security tools to gain visibility into encrypted flows. Performance capabilities include decrypting 8000 connections per second and up to 5Gbps of TLS traffic. The vETO is available for VMware ESXi and KVM hypervisors including Proxmox. System performance is scalable by allocating more CPU cores and memory as required. The appliance can be configured using policies to selectively decrypt traffic based on network or TLS parameter fields, or on the category of website being accessed. If a flow does not match a decryption policy, only encrypted TLS packets are sent to attached security tools. The ETO logs all TLS flow details for visibility into network traffic. The vETO operates under a subscription license supporting between 0.5Gbps and 5Gbps of decryption. Licenses can be upgraded during the subscription period. Subscriptions are available for 12 months or 36 months for either KVM or ESXi environments.