topic SSL Decryption Time Suck in General Topics

SSL Decryption Time Suck

davanderson — Mon, 09 Oct 2017 16:30:16 GMT

Has anyone else noticed a high level of effort required to support SSL Decryption on the PA's? We have this feature activated on a few clusters and this seems to be one of the most time intensive efforts to support with weekly (if not daily) SSL Decryption bypasses for various websites.

Re: SSL Decryption Time Suck

Mick_Ball — Mon, 09 Oct 2017 20:58:48 GMT

I experience similar, so bad that as soon as we have a call logged regarding a failed website we firstly stick it in the no decrypt rule before trying anything else.

i can understand some sites that cannot be decrypted as they are not sticking to certsin regulations and that some sites also avoid mim, but even though a non decrypted site is alloed to pass decrypted we still have sites that will only work if in the no decrypt rule.

mainly tagging this for update notification as someone is sure to enlighten...

plus... If it all worked smoothley, i would be out of a job... Lol.

Re: SSL Decryption Time Suck

davanderson — Tue, 10 Oct 2017 12:00:19 GMT

This is definately an area that could use attention. There are over 2,000 threads when I search in the forums here. That is pretty significant number.