A method of assessing latency of a ciphering end point of a secure communication channel, the method comprising: a. generating, by a traffic analyzer, a test traffic comprising a series of original data packets, wherein, for each original data packet, a size of a given packet is uniquely indicative of the packet's place in a sequence of data packets in the series and enables unique correspondence with a size of the given packet upon its encryption and wherein the size of the given data packet does not exceed a size of a maximal transmit unit, MTU, reduced by a size of authentication, encryption and encapsulation, AEE, overhead corresponding to a protocol applied when creating the secured communication channel; b. by the traffic analyzer, successively transmitting the original packets in the generated series to the ciphering end point, whilst associating the transmitted original packets with respective departure time stamps; c. receiving, by the traffic analyzer, encrypted packets from the ciphering end point and associating the received encrypted packet with respective arrival time stamps; d. for each given received encrypted packet associated with its respective arrival time stamp TS a, identifying a matching original packet characterized by a size of the matching original packet corresponding to a size of the given received encrypted packet reduced by the size of AEE overhead; and its place in the sequence of original packets based on the size of the matching original packet and, thereby, its departure timestamp TS d, thus giving rise to a plurality of timestamps pairs (TS d; TS a), each timestamp pair indicative of delay in delivery for a respective pair of matching packets, the plurality of timestamp pairs usable for latency assessment. a. generating, by a traffic analyzer, a test traffic comprising a series of original data packets, wherein, for each original data packet, a size of a given packet is uniquely indicative of the packet's place in a sequence of data packets in the series and enables unique correspondence with a size of the given packet upon its encryption and wherein the size of the given data packet does not exceed a size of a maximal transmit unit, MTU, reduced by a size of authentication, encryption and encapsulation, AEE, overhead corresponding to a protocol applied when creating the secured communication channel; b. by the traffic analyzer, successively transmitting the original packets in the generated series to the ciphering end point, whilst associating the transmitted original packets with respective departure time stamps; c. receiving, by the traffic analyzer, encrypted packets from the ciphering end point and associating the received encrypted packet with respective arrival time stamps; d. for each given received encrypted packet associated with its respective arrival time stamp TS a, identifying a matching original packet characterized by a size of the matching original packet corresponding to a size of the given received encrypted packet reduced by the size of AEE overhead; and its place in the sequence of original packets based on the size of the matching original packet and, thereby, its departure timestamp TS d, thus giving rise to a plurality of timestamps pairs (TS d; TS a), each timestamp pair indicative of delay in delivery for a respective pair of matching packets, the plurality of timestamp pairs usable for latency assessment.