https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-ssl-decryption-session-is-full/ta-p/540796 <DIV class="lia-message-template-content-zone"> <P><SPAN>This article is based on a discussion, "</SPAN><A href="https://live.paloaltonetworks.com/t5/general-topics/ssl-decryption-session-is-full/m-p/540292" target="_self">SSL Decryption Session is Full</A><SPAN>".&nbsp;Read on to see <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/15603">@Raido_Rattameister</a>&nbsp;response!</SPAN></P> <P>&nbsp;</P> <BLOCKQUOTE> <P>Hello all,&nbsp;</P> <P>&nbsp;</P> <P><SPAN>When the SSL Decryption Session is full, the customer asks how the non-decryption traffic is handled.</SPAN><BR /><BR /><SPAN>We need information about whether the lack of resources is causing random drops or not being affected.</SPAN><BR /><BR /><SPAN>The current model is VM-700, VM-300 and the OS is 9.1.14. CPU and Memory are set to Allow maximum.<BR /><BR /></SPAN>Kind regards,</P> </BLOCKQUOTE> <P>&nbsp;</P> <BLOCKQUOTE> <P>If you are performing decryption then it depends on how decryption profile is configured.</P> <P>Objects &gt; Decryption &gt; Decryption Profile</P> <P>"Block sessions if resources not available"</P> <P>&nbsp;</P> <P>If checkbox is not checked then sessions will pass through but won't be decrypted.</P> <P>If checked then additional sessions won't be allowed.</P> <P>Imagine someone wanting to get out your network bypassing decryption it is possible to initiate loads of ssl sessions until firewall starts bypassing new sessions without decryption.</P> <P>&nbsp;</P> </BLOCKQUOTE> <P>&nbsp;</P> </DIV> Tue, 02 May 2023 23:29:57 GMT JayGolf 2023-05-02T23:29:57Z https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-ssl-decryption-session-is-full/ta-p/540796 <P><SPAN>This article is based on a discussion, "</SPAN><A href="https://live.paloaltonetworks.com/t5/general-topics/ssl-decryption-session-is-full/m-p/540292" target="_self">SSL Decryption Session is Full</A><SPAN>".</SPAN></P> Tue, 02 May 2023 23:29:57 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-ssl-decryption-session-is-full/ta-p/540796 JayGolf 2023-05-02T23:29:57Z https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-ssl-decryption-session-is-full/tac-p/542704#M627 <P>People still using SSL?</P> Fri, 19 May 2023 06:46:08 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-ssl-decryption-session-is-full/tac-p/542704#M627 NViry 2023-05-19T06:46:08Z