topic Re: SSL-decrypt resources needed in General Topics

SSL-decrypt resources needed

BigPalo — Mon, 29 Nov 2021 14:15:31 GMT

Hi,

We are enabling SSL-decrypt for several categories in our FW. We realised that the CPU and memory increased since this config, but its so far about the maximum in datasheet for PA3050. How can we know the SSL decypt consumes and try to have any reference about this?

Re: SSL-decrypt resources needed

BigPalo — Tue, 30 Nov 2021 11:20:11 GMT

any idea about to know why the PA memory is being consumed and where?

Re: SSL-decrypt resources needed

OtakarKlier — Tue, 30 Nov 2021 23:08:34 GMT

Hello,

By how much did it increase? How much traffic is flowing through it vs what the spec sheet says? My guess is that there is something else causing the high CPU. Here are a few pages to look at. I think last time I opened a case because i couldnt find a solution via the pages.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRTCA0

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmV2CAK

Regards,

Re: SSL-decrypt resources needed

LAYER_8 — Wed, 01 Dec 2021 15:56:23 GMT

Palo has an internal tool for this. Reach out to your account team to get a readout from P.O.P.S.I.C.L.E.