topic SSL Decryption internet throughput issues in General Topics

SSL Decryption internet throughput issues

igor.shpak — Tue, 18 May 2021 08:06:57 GMT

Hello everyone,

We have been testing SSL Decryption on a single PC, when decryption policy is applied, internet connection speed is highly affected - Speedtest shows less than 1mb/s

When decryption policy is disabled, the speed is around 200mb/s

Palo Alto 3220, version 9.1.0

We are using a certificate from our domain CA, SSL decryption works fine, just the speed issues

Any ideas?

Re: SSL Decryption internet throughput issues

emr_1 — Tue, 08 Jun 2021 02:17:10 GMT

Hi,

9.1.0 is base image for 9.1 branch.

As you can see as below, there are a couple of issues which are fixed in 9.1.x.

https://docs.paloaltonetworks.com/search.html#q=decrypt&hd=PAN-OS%C2%AE%20Release%20Notes&hq=%40panbookname%3D%3D(%22PAN-OS%20Release%20Notes%22)%20AND%20%40panbooktype%3D%3D(%22Non-Cloud%22)&sort=relevancy&layout=card&numberOfResults=25&f:@panproductcategory=[PAN-OS]&f:@panosversion=[9.1]&f:@paninformationtype=[Release%20Note]

Please upgrade into the latest (should be 9.1.9 in this case) and test again.

If you still see the issue, someone might be able to find the solution.

Regards,

Emr

Re: SSL Decryption internet throughput issues

igor.shpak — Tue, 18 May 2021 15:29:12 GMT

Upgraded to 9.1.9, no more speed issues