# What does NetSenX read from an encrypted connection?

Flow metadata (who connects to whom, when, how often and how much data moves) and a few protocol fields: the server name and the parameters in the TLS handshake, and the answers to DNS queries. NetSenX never decrypts the session and does not read its encrypted content.

FAQ: [Encryption and encrypted traffic](https://netsenx.com/en/faq/encryption) · https://netsenx.com/en/faq/what-does-netsenx-read-from-an-encrypted-connection

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/what-is-ndr

## Related questions

- [Do I need TLS decryption to detect threats?](https://netsenx.com/en/faq/do-i-need-tls-decryption-to-detect-threats)
- [Why not decrypt TLS traffic for inspection?](https://netsenx.com/en/faq/why-not-decrypt-tls-traffic-for-inspection)
- [What does TLS inspection on a firewall break?](https://netsenx.com/en/faq/what-does-tls-inspection-on-a-firewall-break)
- [Can deep packet inspection work on encrypted traffic?](https://netsenx.com/en/faq/can-deep-packet-inspection-work-on-encrypted-traffic)
- [Can malware be detected from flow statistics alone?](https://netsenx.com/en/faq/can-malware-be-detected-from-flow-statistics)