topic Re: SSL Decryption severe throughput impact in General Topics

SSL Decryption severe throughput impact

ShaiW — Mon, 23 Mar 2020 12:02:41 GMT

EDIT2: Please see follow up post below

EDIT: One open ticket is being investigated by TAC escalation as a possible known issue. I will update again as I know more.

In the last month 3 different customers came to me with the same issue - when SSL Decryption is enabled their HTTPS throughput/bandwidth decreases noticeably, one customer said it drops from 60mpbs to 10mbps if SSL decryption is enabled. This is most visible on speedtest.net but also on regular file downloads.

3 tickets opened with TAC and so far no conclusive results.

#1 = PA3220/PANOS8.1.9-h4

#2 = PA3220/PANOS9.0.5

#3 = PA5220/PANOS9.0.5

My question: has anyone else came across this and found a solution or workaround?

Note: I can see numerous, maybe related issues, fixed in 9.0.6, I'd still like to know if anyone positively had this issue and 9.0.6 helped mitigate it before I recommend it to my customers.

Thanks,

Shai

Re: SSL Decryption severe throughput impact

SutareMayur — Tue, 03 Mar 2020 16:58:49 GMT

@ShaiW,

Please check if this helps you.

https://live.paloaltonetworks.com/t5/General-Topics/Performance-Degradation-for-SSL-Decryption/td-p/232357

Mayur

Re: SSL Decryption severe throughput impact

ShaiW — Mon, 23 Mar 2020 12:05:36 GMT

Update about this issue, I just got confirmation from TAC that there is a code fix for my issue that will be released in 8.1.14, 9.0.7, 8.1.13-h3 under bug ID PAN-121626.

If anyone is experiencing this also I hope this helps you.