Method and apparatus for distributing encryption and decryption processes between network devices

An apparatus comprising:

• an interface for transmitting decrypted data from a security device to a client device in a secure session established for communication between an end host and the client device;
• a processor for decrypting data received from the end host, inspecting said decrypted data, and transmitting said decrypted data to the client device for encryption at the client device;
• and
• memory for storing a session key used for decryption at the security device;
• wherein said encryption at the client device is offloaded from the security device to distribute encryption and decryption processes between the client device and the security device.

Logic encoded on one or more non-transitory computer readable media for execution and when executed operable to:

• process instructions at a client device to offload a decryption process and an encryption process from a security device configured to inspect traffic transmitted between the client device and an end host;
• decrypt data received at an agent installed at the client device and forward said decrypted data to the security device;
• and
• encrypt data received from the security device at the agent and forward said encrypted data to a client application installed at the client device;
• wherein said decryption and encryption processes are offloaded to the client device from the security device to distribute said decryption and encryption processes between the client device and the security device.