topic Re: Decrypt Mirror Port and Performance in General Topics

Decrypt Mirror Port and Performance

MP18 — Tue, 03 Sep 2019 17:24:58 GMT

Hi Everyone,

We already have ssl decryption enabled.

Now need to config decrypt mirror port.

Need to confirm when PA sends raw packets to server will it cause any performance issues on the PA?

Regards

Mike

S.Cantwell — Tue, 03 Sep 2019 18:03:31 GMT

Hello

Documentation from the EDU training classes stated 5%, when Inbound Inspection (vs SSL Forward Proxy) was enabled.

I did not see any specific numbers for SSL Forward proxy, but a reasonable ballpark would be between 5 to 15%.

I have been running decryption and port fwd mode on my 220 and have not noticed any degradation in performance.

Thank you.

MP18 — Thu, 05 Sep 2019 02:02:01 GMT

Is it software based or hardware based?

MP18 — Sat, 07 Sep 2019 21:14:58 GMT

Thanks for updating on this

S.Cantwell — Thu, 12 Sep 2019 03:40:12 GMT

The PA220 is probably considered software based, as there is software emulation for the dataplance processors.