topic SSL Decryption Session is Full in General Topics

SSL Decryption Session is Full

JoHyeonJae — Thu, 27 Apr 2023 06:30:20 GMT

Hello all,

When the SSL Decryption Session is full, the customer asks how the non-decryption traffic is handled.

We need information about whether the lack of resources is causing random drops or not being affected.

The current model is VM-700, VM-300 and the OS is 9.1.14. CPU and Memory are set to Allow maximum.

Kind regards,

Re: SSL Decryption Session is Full

Raido_Rattameister — Thu, 27 Apr 2023 12:39:47 GMT

If you are performing decryption then it depends on how decryption profile is configured.

Objects > Decryption > Decryption Profile

"Block sessions if resources not available"

If checkbox is not checked then sessions will pass through but won't be decrypted.

If checked then additional sessions won't be allowed.

Imagine someone wanting to get out your network bypassing decryption it is possible to initiate loads of ssl sessions until firewall starts bypassing new sessions without decryption.

Re: SSL Decryption Session is Full

JoHyeonJae — Fri, 28 Apr 2023 00:06:09 GMT

@Raido_Rattameister

Thank you!