topic Problems with ping due to SSL decryption in General Topics

Problems with ping due to SSL decryption

Radmin_85 — Mon, 14 Jan 2019 11:18:52 GMT

Hello

we have PA 220 model

and when we implement SSL decryption we can observe the ping delay in our trust interface.THE cpu load is 50 %

when we turn off the SSL decryption everything is normal

Re: Problems with ping due to SSL decryption

hshawn — Mon, 14 Jan 2019 16:49:36 GMT

I think there is something else going on here. You cannot even add ping or ICMP traffic to a decryption policy and pings will not be decrypted and should not be impacted/impacting the load like that. I have a few 220s in the lab and have not seen this behavior. Might be time to look at logs and pcaps when you are seeing this behavior.

Re: Problems with ping due to SSL decryption

BPry — Mon, 14 Jan 2019 18:08:47 GMT

@Radmin_85,

As @hshawn mentioned the issue wouldn't be caused by SSL Decryption, but it certaintly could be putting enough of a load on your firewall that the issue is caused because of SSL Decryption. I would really look at the overall device health when you are enabling SSL-Decryption, such as SPS count and the like and see if your box isn't hitting some other limit other than CPU.