topic Re: SSL Decryption Opt-out timeout in General Topics

SSL Decryption Opt-out timeout

jasonbone — Wed, 01 Jun 2011 13:41:58 GMT

Hey I have noticed when I have the SSL Opt-out page turned on about halfway through the day my ssl connections that i have currently running start failing, example. Gmail/gchat start failing to connect. I typically have to open up another tab in my browser and hit an ssl page to be re-prompted for the SSL Opt-out page for my gmail/ghcat clients to start connecting agian? Is there a timeout setting somewhere that i am just not seeing in the admin guide for this page? I would like to make sure it stays active for a typical users work shift 8-10 hours if at all possible.

thanks,

jason

Re: SSL Decryption Opt-out timeout

bpappas — Wed, 01 Jun 2011 14:07:33 GMT

What is the error message in the browser when you have a failed connection? If you can post a screen grab that might be the easiest way to share the info.

-Benjamin

Re: SSL Decryption Opt-out timeout

jasonbone — Wed, 01 Jun 2011 15:35:22 GMT

Ok so regardless of the error or not, Is there a way to extend the timeout for the SSL Opt-Out page???

Re: SSL Decryption Opt-out timeout

DavePalo — Fri, 05 Aug 2011 13:46:49 GMT

Hi Jason,

This can be set from the CLI as below

set deviceconfig setting ssl-decrypt answer-timeout [seconds]

This is a global setting and can not be set beyond 86400 seconds.

Regards,

Dave