SSL Decryption

Joshan_Lakhani — Tue, 31 Mar 2020 11:04:15 GMT

We are doing SSL decryption in another Vsys for the traffic published over the internet based on SSL. We need to know if the high utilization is due to that SSL decryption happening in another Vsys ? as we are planning to move this SSL decryption setup from palo alto to another firewall, will it help to reduce the overall utilization on firewall?

Re: SSL Decryption

OtakarKlier — Tue, 31 Mar 2020 15:00:49 GMT

Hello,

Well this is one of those it depends things. First you need to find out what is causing the high cpu. Check out these articles:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRTCA0

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmV2CAK

If SSL decrypt is causing the high CPU, then yes offloading should reduce the CPU, by how much, cant say for sure.

Regards,

topic Re: SSL Decryption in General Topics

SSL Decryption

Re: SSL Decryption