topic Re: Time based No-decrypt rule? in General Topics https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34139#M25036 <HTML><HEAD></HEAD><BODY><P>Sounds odd because using a regular webbrowser and these sites are on the internet I dont really see why PA would be the fault here (unless they use some unsupported TLS version or such)?</P></BODY></HTML> Tue, 13 Nov 2012 22:06:38 GMT mikand 2012-11-13T22:06:38Z Time based No-decrypt rule? https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34138#M25035 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>On my site we have a Decrypt-all rule in place (apart from some no-decrypt rules for specific business related sites).</P><P>The problem I have is that some users are having issues accessing sites like Easyjet and Ryanair's booking pages, this I am fairly sure is due to the Palo Box decrypting the info and the websites not liking that.</P><P>Now this is not work related so as such I don't want them doing it during working hours. However, I don't mind them doing so during lunch breaks. So my question is, can I do a no-decrypt rule for certain sites like this that only comes into affect during lunch hours?</P></BODY></HTML> Tue, 13 Nov 2012 11:23:45 GMT https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34138#M25035 JRussell 2012-11-13T11:23:45Z Re: Time based No-decrypt rule? https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34139#M25036 <HTML><HEAD></HEAD><BODY><P>Sounds odd because using a regular webbrowser and these sites are on the internet I dont really see why PA would be the fault here (unless they use some unsupported TLS version or such)?</P></BODY></HTML> Tue, 13 Nov 2012 22:06:38 GMT https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34139#M25036 mikand 2012-11-13T22:06:38Z Re: Time based No-decrypt rule? https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34140#M25037 <HTML><HEAD></HEAD><BODY><P>Yes, these are all using a standard web browser. But the only reason I know it is the PA box is because if I put a no-decyrpt rule in for those sites in question then it works. Without them and with the decrypt-all rule in place it doesn't work. The website loads but then will get to a point where it will not continue. </P><P>This have only really noticed it on https sites though. </P></BODY></HTML> Wed, 14 Nov 2012 09:38:08 GMT https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34140#M25037 JRussell 2012-11-14T09:38:08Z Re: Time based No-decrypt rule? https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34141#M25038 <HTML><HEAD></HEAD><BODY><P>Do you have a direct link which doesnt load on your PA with decrypt-all enabled which I (or someone else) could test with?</P></BODY></HTML> Wed, 14 Nov 2012 09:45:31 GMT https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34141#M25038 mikand 2012-11-14T09:45:31Z Re: Time based No-decrypt rule? https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34142#M25039 <HTML><HEAD></HEAD><BODY><P>By the way, could you verify if this is the case for you?</P><P></P><P><A __default_attr="2954" __jive_macro_name="document" class="jive_macro jive_macro_document" href="https://live.paloaltonetworks.com/"></A></P></BODY></HTML> Wed, 14 Nov 2012 09:51:13 GMT https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34142#M25039 mikand 2012-11-14T09:51:13Z Re: Time based No-decrypt rule? https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34143#M25040 <HTML><HEAD></HEAD><BODY><P>Yes, it looks like that might be the case I am having. A few links that you could try. Halfway through booking a flight through www.ryanair.com </P><P>Or using Dropbox.com. There are a few other travel websites, such as bookings.com and easyjet.com</P></BODY></HTML> Wed, 14 Nov 2012 10:43:01 GMT https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34143#M25040 JRussell 2012-11-14T10:43:01Z Re: Time based No-decrypt rule? https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34144#M25041 <HTML><HEAD></HEAD><BODY><P>While other https sites like gmail.com works without problems?</P></BODY></HTML> Wed, 14 Nov 2012 10:47:38 GMT https://live.paloaltonetworks.com/t5/general-topics/time-based-no-decrypt-rule/m-p/34144#M25041 mikand 2012-11-14T10:47:38Z