https://live.paloaltonetworks.com/t5/general-topics/decryption-changes-v9-0-4/m-p/306516#M79625 <P>We upgraded the firewall to v9.0.4 from 8.1.11h2 this weekend and came in to our hosted exchange / outlook profiles failing to load. I added the mail host server in the do not decrypt policy and a percentage of the users reported services normal. It was not until I disabled decryption completely until the entire network started working consistently. Has anybody had any new decryption issues post upgrade?</P> Mon, 13 Jan 2020 16:27:17 GMT Millette 2020-01-13T16:27:17Z https://live.paloaltonetworks.com/t5/general-topics/decryption-changes-v9-0-4/m-p/306516#M79625 <P>We upgraded the firewall to v9.0.4 from 8.1.11h2 this weekend and came in to our hosted exchange / outlook profiles failing to load. I added the mail host server in the do not decrypt policy and a percentage of the users reported services normal. It was not until I disabled decryption completely until the entire network started working consistently. Has anybody had any new decryption issues post upgrade?</P> Mon, 13 Jan 2020 16:27:17 GMT https://live.paloaltonetworks.com/t5/general-topics/decryption-changes-v9-0-4/m-p/306516#M79625 Millette 2020-01-13T16:27:17Z https://live.paloaltonetworks.com/t5/general-topics/decryption-changes-v9-0-4/m-p/306750#M79673 <P>The only thing that should have changed is that 9.0 would be performing decryption on HTTP/2 connections; that's really easy to disable in a test decryption profile by selecting the&nbsp;<STRONG>Strip ALPN&nbsp;</STRONG>option and applying it to a test client and seeing if that works properly.&nbsp;</P> Wed, 15 Jan 2020 04:58:30 GMT https://live.paloaltonetworks.com/t5/general-topics/decryption-changes-v9-0-4/m-p/306750#M79673 BPry 2020-01-15T04:58:30Z