topic Re: Since update to 3.1.4 no ssl decryption in General Topics https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46286#M34017 <HTML><HEAD></HEAD><BODY><P>please contact your support provider and open up a case via email or phone call.</P></BODY></HTML> Mon, 27 Sep 2010 22:32:40 GMT jnguyen 2010-09-27T22:32:40Z Since update to 3.1.4 no ssl decryption https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46285#M34016 <HTML><HEAD></HEAD><BODY><P>We have some user categories with "no decryption" but the default rule "decrypt".</P><P><SPAN>Before updating from 3.1.3, </SPAN><A class="jive-link-external-small" href="https://secure.eicar.org/eicar.com.txt">https://secure.eicar.org/eicar.com.txt</A><SPAN> was blocked reliably. Since 3.1.4 not. Nothing else was changed.</SPAN></P><P>In fact i cannot see any ssl decryption on my PAN 2050. Is there a way to troubleshoot the issue?</P></BODY></HTML> Mon, 27 Sep 2010 10:17:49 GMT https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46285#M34016 mhuels 2010-09-27T10:17:49Z Re: Since update to 3.1.4 no ssl decryption https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46286#M34017 <HTML><HEAD></HEAD><BODY><P>please contact your support provider and open up a case via email or phone call.</P></BODY></HTML> Mon, 27 Sep 2010 22:32:40 GMT https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46286#M34017 jnguyen 2010-09-27T22:32:40Z Re: Since update to 3.1.4 no ssl decryption https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46287#M34018 <HTML><HEAD></HEAD><BODY><P>The PA2050 shows:</P><DIV> </DIV><DIV><DIV>CLI: <STRONG>show system setting ssl-decrypt certificate-cache | match Cached</STRONG></DIV><DIV><EM>Cached 252 certificates</EM></DIV></DIV><DIV> </DIV><DIV><P>CLI: <STRONG>debug dataplane reset ssl-decrypt certificate-cache</STRONG></P><DIV><EM>deleted 252 cert entries</EM></DIV><DIV> </DIV><DIV>has resolved the problem. </DIV></DIV></BODY></HTML> Tue, 28 Sep 2010 11:00:39 GMT https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46287#M34018 mhuels 2010-09-28T11:00:39Z Re: Since update to 3.1.4 no ssl decryption https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46288#M34019 <HTML><HEAD></HEAD><BODY><P>This is a known issue in 3.1.4 and 3.1.5.</P><P><BR />Unfortunately, as you can understand it is not possible to execute this command in order to <SPAN style="text-decoration: underline;">temporarily </SPAN>resolve the problem.</P><P>The issue also existis as well in the updated version 3.1.6.</P><P></P><P>These versions 3.1.4, 3.1.5 and 3.1.6 have several issues with SSL Decryption that stops working. A case has been opened and we are waiting for the next software update (3.1.7?) to resolve all the ssl-decryption issues.</P><P></P><P></P><P>Regards,</P><P></P><P>George</P></BODY></HTML> Mon, 29 Nov 2010 13:01:04 GMT https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46288#M34019 ggoudr 2010-11-29T13:01:04Z Re: Since update to 3.1.4 no ssl decryption https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46289#M34020 <HTML><HEAD></HEAD><BODY><P>SSL Decryption issues seem to have been resolved in 3.1.7</P></BODY></HTML> Tue, 25 Jan 2011 10:52:02 GMT https://live.paloaltonetworks.com/t5/general-topics/since-update-to-3-1-4-no-ssl-decryption/m-p/46289#M34020 ggoudr 2011-01-25T10:52:02Z