topic Re: ssl decryption vwire in General Topics

ssl decryption vwire

minow — Tue, 07 Jan 2014 10:12:54 GMT

Hey

The user ssl session is going in this path:

User -> PA VWeirw internal > Backbone > PA VWeirw External > Checkpoint > internet

If we enable decryption on the external VWeirw the user is getting timeout in the browser

If we enable decryption on the internal VWire the decryption is working well

does somone bump into this situation?

thanks

dor

VinceM — Tue, 07 Jan 2014 10:55:16 GMT

Hi,

not really clear .... maybe with a scheme 🙂

Have you got security rule based on web-browsing and app-default ?

If yes, it can explain the situation, du to decryption, you have web-browsing on 443 and it doesn't match app-default.

Hope help.

minow — Thu, 09 Jan 2014 09:34:24 GMT

VinceM — Thu, 09 Jan 2014 09:44:19 GMT

Hi,

and what about your security rules ? and session log when decryption fail ?

Retired Member — Thu, 09 Jan 2014 12:19:23 GMT

can you share a session which you say gets time out

with show session id

and the rule it matches

minow — Sat, 18 Jan 2014 20:15:33 GMT

amm not right now, this was during a POC so i dont have access to the machine for now.

maby some one can replicate