A device, comprising: one or more processors to: receive encrypted traffic associated with a secure session; determine, based on the encrypted traffic, information associated with an offload service to be applied to the encrypted traffic associated with the secure session, the information associated with the offload service indicating whether the encrypted traffic is permitted to bypass inspection by one or more security services; selectively permit the encrypted traffic (140, 155), associated with the secure session, to bypass inspection by the one or more security services based on the information associated with the offload service, wherein said selectively permitting the encrypted traffic to bypass inspection by the one or more security services comprises forwarding data messages included in the encrypted traffic without decrypting, inspecting and re-encrypting; and the one or more processors being further configured to: identify a direction of the encrypted traffic; and where the one or more processors, when selectively permitting the encrypted traffic to bypass inspection by the one or more security services, are to: selectively permit the encrypted traffic to bypass inspection by the one or more security services based on the direction of the encrypted traffic. one or more processors to: receive encrypted traffic associated with a secure session; determine, based on the encrypted traffic, information associated with an offload service to be applied to the encrypted traffic associated with the secure session, the information associated with the offload service indicating whether the encrypted traffic is permitted to bypass inspection by one or more security services; selectively permit the encrypted traffic (140, 155), associated with the secure session, to bypass inspection by the one or more security services based on the information associated with the offload service, wherein said selectively permitting the encrypted traffic to bypass inspection by the one or more security services comprises forwarding data messages included in the encrypted traffic without decrypting, inspecting and re-encrypting; and receive encrypted traffic associated with a secure session; determine, based on the encrypted traffic, information associated with an offload service to be applied to the encrypted traffic associated with the secure session, the information associated with the offload service indicating whether the encrypted traffic is permitted to bypass inspection by one or more security services; selectively permit the encrypted traffic (140, 155), associated with the secure session, to bypass inspection by the one or more security services based on the information associated with the offload service, wherein said selectively permitting the encrypted traffic to bypass inspection by the one or more security services comprises forwarding data messages included in the encrypted traffic without decrypting, inspecting and re-encrypting; and the one or more processors being further configured to: identify a direction of the encrypted traffic; and where the one or more processors, when selectively permitting the encrypted traffic to bypass inspection by the one or more security services, are to: selectively permit the encrypted traffic to bypass inspection by the one or more security services based on the direction of the encrypted traffic. identify a direction of the encrypted traffic; and where the one or more processors, when selectively permitting the encrypted traffic to bypass inspection by the one or more security services, are to: selectively permit the encrypted traffic to bypass inspection by the one or more security services based on the direction of the encrypted traffic.