https://live.paloaltonetworks.com/t5/general-topics/about-ssl-decryption-error/m-p/79055#M43124 <P>Hi,</P> <P>&nbsp;</P> <P>Chrome intentionally removed support of falling-back over multiple TCP connections :</P> <P>&nbsp;</P> <P><A href="https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/F6ZjP6FnyRE" target="_blank">https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/F6ZjP6FnyRE</A>&nbsp;</P> <P>&nbsp;</P> <P>As a workaround you could forcefully max tls version as 1.1 or 1.0 in your decryption profile.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Max TLS version" style="width: 796px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/4269i0D505BC9E2013237/image-size/large?v=v2&amp;px=999" role="button" title="Screen Shot 2016-06-03 at 09.26.43.png" alt="Max TLS version" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Max TLS version</span></span></P> <P>I'd recommend to open a case with support in the meantime.</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 03 Jun 2016 07:34:05 GMT kiwi 2016-06-03T07:34:05Z https://live.paloaltonetworks.com/t5/general-topics/about-ssl-decryption-error/m-p/79048#M43119 <P>Hi there,&nbsp;</P> <P>&nbsp;</P> <P>recently we have implemented ssl decryption in our network , But&nbsp;<SPAN>Chrome comes up with "</SPAN><SPAN><SPAN><SPAN class="lia-search-match-lithium">ERR</SPAN>_<SPAN class="lia-search-match-lithium">SSL</SPAN>_<SPAN class="lia-search-match-lithium">FALLBACK</SPAN>_<SPAN class="lia-search-match-lithium">BEYOND</SPAN>_</SPAN><WBR /><SPAN><SPAN class="lia-search-match-lithium">MINIMUM</SPAN>_<SPAN class="lia-search-match-lithium">VERSION"&nbsp;</SPAN></SPAN></SPAN></P> Fri, 03 Jun 2016 05:43:18 GMT https://live.paloaltonetworks.com/t5/general-topics/about-ssl-decryption-error/m-p/79048#M43119 gombodorj 2016-06-03T05:43:18Z https://live.paloaltonetworks.com/t5/general-topics/about-ssl-decryption-error/m-p/79055#M43124 <P>Hi,</P> <P>&nbsp;</P> <P>Chrome intentionally removed support of falling-back over multiple TCP connections :</P> <P>&nbsp;</P> <P><A href="https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/F6ZjP6FnyRE" target="_blank">https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/F6ZjP6FnyRE</A>&nbsp;</P> <P>&nbsp;</P> <P>As a workaround you could forcefully max tls version as 1.1 or 1.0 in your decryption profile.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Max TLS version" style="width: 796px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/4269i0D505BC9E2013237/image-size/large?v=v2&amp;px=999" role="button" title="Screen Shot 2016-06-03 at 09.26.43.png" alt="Max TLS version" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Max TLS version</span></span></P> <P>I'd recommend to open a case with support in the meantime.</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 03 Jun 2016 07:34:05 GMT https://live.paloaltonetworks.com/t5/general-topics/about-ssl-decryption-error/m-p/79055#M43124 kiwi 2016-06-03T07:34:05Z