topic Re: Does SSL decryption uses software or Hardware in General Topics

Does SSL decryption uses software or Hardware

MP18 — Fri, 26 Apr 2019 16:33:39 GMT

Need to confirm when we enable ssl decryption then it is resource intensive.

Does it uses both hardware and software resources?

Re: Does SSL decryption uses software or Hardware

BPry — Sat, 27 Apr 2019 04:40:29 GMT

You'll see a resource hit when you enable decryption, and the size of the hit depends on a number of metrics. I'd recommend that when you first enable decryption you start with a subset of users to see what your companies specific hit will actually be. Keep in mind that each platform will also have stats specific to SSL-Decryption on their datasheet, so that's one area you can look to see if you have large enough firewalls to actually support the feature.

Re: Does SSL decryption uses software or Hardware

MP18 — Sat, 27 Apr 2019 05:16:41 GMT

Thanks for that info.

Need to know if SSL decryption is done by hardware on 5050 or 5220 PA?

Re: Does SSL decryption uses software or Hardware

BPry — Sat, 27 Apr 2019 05:54:30 GMT

@MP18,

PA-32xx and above (anything in the 5k or 7k series) does ssl decryption via dedicated hardware. The PA-2xx, PA-8xx, and PA-30xx are strictly software based. Regardless of what model you have the MP CPU usage will increase; it simply increases by a wider margin with the PA-2xx, PA-8xx and PA-30xx series devices.

Re: Does SSL decryption uses software or Hardware

barjakovsky — Sat, 02 Apr 2022 13:22:39 GMT

Hello,

Would it be possible to know the source of the information regarding the fact that SSL decryption is hardware for models greater than or equal to 32xxx?
I can't find anything about this :(.